Re: How do I give ASP.NET process network credentials?

From: Joseph Geretz (jgeretz@nospam.com)
Date: 10/29/02 

From: "Joseph Geretz" <jgeretz@nospam.com>
Date: Tue, 29 Oct 2002 16:32:49 -0500

Hi Willy,

> 1. Running as SYSTEM should be no problem when impersonating but you need
to create a logon session by calling Win32 LogonUser. What
> exactly did you encounter as a problem?

I'm not explicitly creating a logon session, but I'd like to get the ASP.NET
code running under a specific domain account, by adjusting the various
settings in Machine.config and in Web.config, specifically the processModel
settings and the identity settings. Here are my settings and here is the
error presented below, beneath my signature:

> 2. .NET classes can be used as COM+ server application
> (see EnterpriseServices).

Yes, I know this and I routinely engineer claases for COM+, however since
this would be the only usage of COM+ for the entire system, I'd rather find
a solution that doesn't require COM+. I don't belive that I should need to
use COM+ to do this.

Thanks,

- Joe Geretz -

Machine.config:
        <processModel enable="true"
                      timeout="Infinite"
                      idleTimeout="Infinite"
                      shutdownTimeout="0:00:05"
                      requestLimit="Infinite"
                      requestQueueLimit="5000"
                      restartQueueLimit="10"
                      memoryLimit="60"
                      webGarden="false"
                      cpuMask="0xffffffff"
                      userName="SYSTEM"
                      password="AutoGenerate"
                      logLevel="Errors"
                      clientConnectedCheck="0:00:05"
                      comAuthenticationLevel="Connect"
                      comImpersonationLevel="Impersonate"
                      responseRestartDeadlockInterval="00:09:00"
                      responseDeadlockInterval="00:03:00"
                      maxWorkerThreads="25"
                      maxIoThreads="25"
        />

Web.config:
        <identity impersonate="false" userName="INTERNAL\Administrator"
password="bigcheese"/>

Server Error in '/PDPortal' Application.

---------------------------------------------------------------------------- 

----
Configuration Error
Description: An error occurred during the processing of a configuration file
required to service this request. Please review the specific error details
below and modify your configuration file appropriately.
Parser Error Message: Could not create Windows user token from the
credentials specified in the config file. Error from the operating system 'A
required privilege is not held by the client. '
Source Error:
Line 51:             password="password of above specified account" | empty
string
Line 52:         -->
Line 53:         <identity impersonate="false"
userName="INTERNAL\Administrator" password="bigcheese"/>
Line 54:
Line 55:         <!--  APPLICATION-LEVEL TRACE LOGGING

Relevant Pages

  • Re: How do I give ASP.NET process network credentials?
    ... If you want that username and password to be used, impersonation MUST be ... > settings and the identity settings. ... > below and modify your configuration file appropriately. ... > required privilege is not held by the client. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Why Embedded Videos Wont Play On Linux?
    ... That's the best I've done with setup. ... # system-wide settings, all of which are overrriden by the command line. ... # The configuration file settings are the same as the command line ... # Use 8MB input cache by default. ...
    (Ubuntu)
  • Re: How do I give ASP.NET process network credentials?
    ... to get this to work I need to disable impersonation. ... > Jimco Add-ins ... >> settings and the identity settings. ... >> below and modify your configuration file appropriately. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: creating default settings file per user
    ... I'd like to provide a tool (sh script) which creates the settings file for each user, my problem currently is that in order to do that the script must be ran be the administrator... ... read and process any user-specific configuration file over-writing whatever the system-wide file has already set. ... Have comments start by a hash, so that, at least, lines starting with a hash can be ignored ...
    (comp.os.linux.development.apps)