Re: Using local AzMan XML store from Win32 Service

owrt_at_nospam.nospam
Date: 10/20/05

  • Next message: Joe Kaplan \(MVP - ADSI\): "Re: Signle-Sign on web application running on IIS" 
    Date: Wed, 19 Oct 2005 18:31:51 -0400

    Dominick,

    Thanks for the response.

    Excuse my ignorance, but what does IIRC stand for? I? I? Release
    candidate?

    >From the documentation I've located, XP should be supported by AzMan (for
    access checks). However, to host the AzMan store in AD, you must have
    Windows Server 20003 --- at least that's what I remember.

    Yep, I've added the same set of priviledges to the "reader role", but with
    no luck.

    Technically, the "user/group" I add to the priviledge set is actually the
    group SYSTEM (on the local machine). There is no explicit account for "Local
    System" that I can locate.

    Robert

    "Dominick Baier [DevelopMentor]" <dbaier@pleasepleasenospamdevelop.com>
    wrote in message news:42565460114fa88c7a2eda48a4d50@news.microsoft.com...
    > Hello owrt@nospam.nospam,
    >
    > AzMan is IIRC not supported under XP.
    >
    > Have you also set the "reader role" in the AzMan MMC
    > (store->properties->security) ??
    >
    >
    > ---------------------------------------
    > Dominick Baier - DevelopMentor
    > http://www.leastprivilege.com
    >
    >> I'm having a problem trying to access an AzMan (Authorization Manager)
    >> XML store from a process running as a Win32 service.
    >>
    >> I get an InvalidArgumentException thrown from
    >> AZROLESLib.AzAuthorizationStoreClass.Initialize().
    >>
    >> The Win32 service is running as "Local System". If I run the service
    >> as my domain account, it works fine. However, I need to be able to run
    >> the service as "Local System".
    >>
    >> The platform is Windows XP SP2 (which is one of the target platforms
    >> for the software I'm building).
    >>
    >> I've set the permissions on the XML store (validated the file
    >> permissions and validated in the AzMan MMC plug-in) so that pretty
    >> much every "well-known" system group has full control over the store.
    >> However, I was unable to get it to work.
    >>
    >> The only other mention of this I've seen is that it might work on
    >> Windows Server 2003 but doesn't work on Windows XP. The writer of that
    >> post implied the AzMan was broken under Windows XP.
    >>
    >> Anyone got any ideas about how to make this work?
    >>
    >> Thanks,
    >>
    >> Robert
    >>
    >
    >

  • Next message: Joe Kaplan \(MVP - ADSI\): "Re: Signle-Sign on web application running on IIS"

    Relevant Pages

    • AzMan problems -- InvalidCastException
      ... I cannot find a newgroup dedicated to AzMan so if anyone has any ideas on ... Client requests come in over .NET remoting. ... the store and open the application for every request, ... almost always get an interop error the error is "InvalidCastException ...
      (microsoft.public.platformsdk.security)
    • AzMan threading problems
      ... I cannot find a newgroup dedicated to AzMan so if anyone has any ideas on ... Client requests come in over .NET remoting. ... the store and open the application for every request, ... almost always get an interop error the error is "InvalidCastException ...
      (microsoft.public.dotnet.security)
    • Re: Azman Help
      ... This newsgroup is for questions about security in Access, ... > the code snippet declaring application store looks like as follows: ... > Another question is how to define more than 3 level hierarchical roles ... > AzMan? ...
      (microsoft.public.access.security)
    • Azman Help
      ... first, when i use Azman to create application store in C#, why it always ... xml storage is correctly created and nothing seems wrong when I open MMC to ... the code snippet declaring application store looks like as follows: ... Another question is how to define more than 3 level hierarchical roles into ...
      (microsoft.public.platformsdk.security)
    • Re: AzMan Still the way to go?
      ... The main idea with AzMan is the concept of programming against operations. ... The main idea behind the XML store is that you need a place to store the ... planning on having the whole site use IIS windows authentication. ...
      (microsoft.public.dotnet.framework.aspnet.security)