RE: Locking down CAS policy

Ok, turning off CAS didn't fix the issue. Still got the "Service Unavailable"
message. And using a URL membership condition also didn't fix the issue, but
setting it to All Code and FullTrust did fix it. So one peice makes it look
like it's not a CAS issue and the other does. Correct? Also using
Zone->MyComputer with FullTrust also works.

I created a simple "Hello World" asp.net app and put it as the root site on
that server. We're running v2.0 so the application doesn't generate any
assemblies for the code behind, but i did set a SN Key File in the "MSBuild
Options" on the application properties page. This is the most basic app i can
set up. One aspx file with no code-behind and no web.config. Sent this app to
the Dev server and same issues. "Server Unavailable" again with the same
error event in the Event Logs and setting the root Code Group to All Code ->
FullTrust again fixes it.

It really looks like an unknown assembly, whose SN evidence doesn't fit into
one of the code groups, is being accessed at runtime.

"Luke Zhang [MSFT]" wrote:

Hello,

You may first try to turn off Code Access Security using the Caspol.exe
utility:

C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322> caspol -s off

Can this temporarily fix the issue? This can help make sure is a CAS issue.
And then, you may perform following test:

1. Create a new code group based on the URL of your application, and grant
it full permission. Restart IIS, and test if this will help. This help us
make if the permission set is configured for the ASP.NET

2. Create a very simple ASP.NET, don't reference any other assembly.
StrongName it and test again. This help us determine if there is other
assembly affect the issue.

For more inforamtion about ASP.NET CAS, you may refer to:

ASP.NET Code Access Security
http://msdn2.microsoft.com/en-us/library/87x8e4d1.aspx

Sincerely,

Luke Zhang

Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.




.

Relevant Pages

  • RE: WMV seeking problem when WMV acceleration is on
    ... When this fix was completed seeking worked correctly ... using DRM content in DirectShow when connected to the VMR7. ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.win32.programmer.directx.video)
  • Re: New Server Hardware - Move everything from one Server to another?
    ... I was hoping for a way to move the DBs without having to do everything piecemeal. ... Move the DBs, move the Users, fix the user, move the jobs, fix the jobs. ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.sqlserver.setup)
  • Re: Heap Corruption Issue using Manifest Files
    ... I tried you suggested work around. ... Please let me know if is a fix available. ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.interop)
  • RE: Catching Security Exceptions:
    ... event to capture any potential .NET CAS SecurityException in your ASP.net ... you're encountering some CAS specific SecurityException ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: "Fix this Application" Problem
    ... If "Fix this Application" is not any more, ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ... project analysis and dump analysis issues. ...
    (microsoft.public.dotnet.framework)