Re: How to publish ASPNET web application locating the app files on shared folder

The problem lies in the network location. By default the security
policy will not allow to run apps from the network share or locations.
Using CASPOL you can give permission set to run the app from the
network share.

Thanks

Sandy

milen.elkin@xxxxxxxxx wrote:
Hi,
I am trying to publish this ASP.NET 2.0 application on IIS 6.0, on a
2003
server. When I publish it on a local drive, it is OK. When I publish it
on a
file share on file server in the same domain, and try to run it, it
throws
this exception:

//--------Begin

Security Exception
Description: The application attempted to perform an operation not
allowed
by the security policy. To grant this application the required
permission
please contact your system administrator or change the application's
trust
level in the configuration file.

Exception Details: System.Security.SecurityException: Request for the
permission of type 'System.Web.AspNetHostingPermission, System,
Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'
failed.

Source Error:

An unhandled exception was generated during the execution of the
current web
request. Information regarding the origin and location of the exception
can
be identified using the exception stack trace below.

Stack Trace:


[SecurityException: Request for the permission of type
'System.Web.AspNetHostingPermission, System, Version=2.0.0.0,
Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.]
System.Reflection.Assembly.GetType(String name, Boolean
throwOnError,
Boolean ignoreCase) +0
System.Web.UI.TemplateParser.GetType(String typeName, Boolean
ignoreCase,
Boolean throwOnError) +270
System.Web.UI.TemplateParser.ProcessInheritsAttribute(String
baseTypeName, String codeFileBaseTypeName, String src, Assembly
assembly) +163

System.Web.UI.TemplateParser.PostProcessMainDirectiveAttributes(IDictionary

parseData) +192
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:2.0.50727.42;
ASP.NET
Version:2.0.50727.210

//--------End

This is what I have tried so far:
1. Give full permissions on NETWORK account on the share and security
of
that folder
2. Cange the user that IIS uses to connect to the Network directory to
a
Domain Admin user.
3. Impersonate the identity of the user that ASPNET uses to run the app
in
the web.config configuration file to a domain admin.
4.Use the "aspnet_regiis -ga" on a dedicated domain user and make a
application pool that runs under that user, and give full permissions
on the
share to that user, and use that app pool in my app.
5. Give <trust level="Full" /> in the web.config
6. In ".NET Framework 2.0 Configuration\My Computer\Runtime Security
Policy\Machine\Code Groups\All_Code\LocalIntranet_Zone" add new code
group that gives the shared folder "full trust".

Obviously I am missing something or i am doing something wrong. Please
help.

.

Relevant Pages

  • Re: Environment.CommandLine Security Exception
    ... installed on network drives and they typically don't ... require that users get into the details of security as ... believe an MS Office network install is a good example of ... >app from a *network* share. ...
    (microsoft.public.dotnet.security)
  • Re: VS.NET application security when starting Application from network
    ... Is there some reason thta you MUST load the .NET code from network share (it ... security setting to allow .NET code from outside running computer runs. ... NET app created, simply drop it to that folder, all ...
    (microsoft.public.vsnet.general)
  • Re: Environment.CommandLine Security Exception
    ... .net CAS considers all network shares as sources of only ... treats "Security Zones" with different permissions. ... > believe an MS Office network install is a good example of ... >>instead running from the local hard disk, the app would ...
    (microsoft.public.dotnet.security)
  • RE: Unhandled exception vs handled (security issue)
    ... If you are able to lauch the app. ... that the Main is never called due to security exception. ... Adding this line would cause the unhandled exception which would ... In the case of app1, the only way to discover what the exception class is, ...
    (microsoft.public.dotnet.security)
  • Re: Environment.CommandLine Security Exception
    ... I remember exactly the same sort of comments when Java 2 security moved to a local ... .net CAS considers all network shares as sources of only ... >>>instead running from the local hard disk, the app would ...
    (microsoft.public.dotnet.security)