Groups | Blog | Home
all groups > iis security > september 2006 >

iis security : security between serving files from a fileshare


Ian Jagger
9/7/2006 9:36:02 AM
Hi,

I have two machines that are on the internet that can share files between
them. They are otherwise firewalled.They are not on the same domain, but they
can see each other and share files in windows.

They are p1 and p2. p1 shares the directory pics with p2. p2 logs in as
p1\pics to see the pics. This works fine for windows, but is having problems
with iis.

I have set up the directory as a virtual directory in iis, and have set to
look at the fileshare and entered the username and password, but am getting a
500 error - invalid username / password. When I browse for the password, it
only allows me accounts on p2.

Without creating a domain, how can I get iis on p2 to serve pics from p1.

ie http://p2.mysite.com/pics/aa1.jpg which will serve the file
\\p1\pics\aa1.jpg

Thanks,


Ian
Ian Jagger
9/8/2006 6:11:02 AM
Hi,

thanks for the advice, but I tried it and am getting a 500 error - internal
server error.

Any other ideas, as I can browse to the file in iis manager, yet I get a 500
error if I request it in a browser.

Thanks,

Ian

[quoted text, click to view]
Ian Jagger
9/8/2006 6:54:01 AM
Hi, thanks for the speedy response.

[quoted text, click to view]

I am serving images from the share (jpg and gif). They display if I open
them on the machine with them.

[quoted text, click to view]

I've written an ASP 2 c# based webpage to display the images, and it was
working fine when they were local to it. Since I was getting errors, I tried
requesting the images directly from a web browser and was getting a 500
error. I've disabled friendly urls and I don't get more help.


I disabled friendly urls and it was no more help.

[quoted text, click to view]

I have anonymous access to the site, and the site doesn't request
authentication.

Thanks,

Ian

[quoted text, click to view]
Miha Pihler [MVP]
9/8/2006 2:43:33 PM
Hi Ian,

On virtual directory on server two (P2) you can specify which username and
password to use by clicking on "Connect As". When entering username you can
manually put in computer name (e.g. P1\username) and password for username
created on P1. Instead of P1 you could also use "string" localhost\username
where username is again account created on P1.

I hope this helps,

--
Mike
Microsoft MVP - Windows Security

[quoted text, click to view]

Miha Pihler [MVP]
9/8/2006 3:36:32 PM
Hi Ian,

What are you serving? It this application running on your server or static
pages?

In which case you get error 500? If you use Integrated or Basic?

Can you make sure that you have disabled Friendly Errors in IE -- it might
give you more specific (helpful) error message.

--
Mike
Microsoft MVP - Windows Security

[quoted text, click to view]

Ken Schaefer
9/12/2006 12:00:00 AM
Please cut and paste the exact error message you are seeing on the screen.

Thanks

Cheers
Ken



[quoted text, click to view]

Ian Jagger
9/12/2006 1:33:01 AM
The page cannot be displayed
There is a problem with the page you are trying to reach and it cannot be
displayed.

--------------------------------------------------------------------------------

Please try the following:

Open the 64.34.176.167 home page, and then look for links to the information
you want.
Click the Refresh button, or try again later.

Click Search to look for information on the Internet.
You can also see a list of related sites.




HTTP 500 - Internal server error
Internet Explorer


Any ideas, as this was with friendly urls turned off.

Regards,

Ian

[quoted text, click to view]
Miha Pihler [MVP]
9/18/2006 7:00:05 PM
Hi Ian,

If I browse http://64.34.176.167 I get Under Construction -- which is normal
for IIS with no content set (no Default page...).

--
Mike
Microsoft MVP - Windows Security

[quoted text, click to view]

AddThis Social Bookmark Button