Re: IIS 6.0 CGI pipe broken...
From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 11/20/03
- Next message: Tom Kaminski [MVP]: "Re: IIS 5.0 User Authentication"
- Previous message: David Wang [Msft]: "Re: command line tool for secure IIS virtual directory???"
- In reply to: Hoch: "Re: IIS 6.0 CGI pipe broken..."
- Next in thread: Hoch: "Re: IIS 6.0 CGI pipe broken..."
- Reply: Hoch: "Re: IIS 6.0 CGI pipe broken..."
- Reply: Hoch: "Re: IIS 6.0 CGI pipe broken..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 20 Nov 2003 04:00:47 -0800
Ok, great, so your CGI is obeying all the rules and is actually executed by
IIS. So, we probably want to look at permissions. It sounds like you only
have anonymous authentication enabled since you're only talking about IUSR.
- Are you running in IIS5 Compatibility or IIS6 Native Mode?
- If IIS6 Native Mode, what is the AppPoolIdentity for the Application Pool?
If IIS5 Compatibility Mode, is it Low Isolation (LocalSystem) or not (IWAM
or any other user)?
- If the identity is a custom user, what permissions does this user have
(use secpol.msc to determine)?
- Does this CGI "shell out" to call CMD.EXE in any way, like execute a batch
script or execute another EXE.
The logon made by RUNAS is has a different set of switches than the logon
that IIS makes. In addition, the identity from the RUNAS logon can call
CMD.EXE (it's an interactive logon) while the IIS logon cannot call CMD.EXE
(it's a non-interactive logon) unless the authenticated user is a local
Administrator.
-- //David IIS This posting is provided "AS IS" with no warranties, and confers no rights. // "Hoch" <Hoch@fightspammers.com> wrote in message news:oprywd34coxbnazm@localhost... David, I was thinking that If I get an error from the CGI in HTML probably the problem is not with the header. Anyway, here is the correct header I get from the command line STATUS: 200 Success Server: NetLink/4D MIME-Version: 1.0 Content-type: text/html <HTML>.....(Long page)...</HTML> Thanks again! Hoch.
- Next message: Tom Kaminski [MVP]: "Re: IIS 5.0 User Authentication"
- Previous message: David Wang [Msft]: "Re: command line tool for secure IIS virtual directory???"
- In reply to: Hoch: "Re: IIS 6.0 CGI pipe broken..."
- Next in thread: Hoch: "Re: IIS 6.0 CGI pipe broken..."
- Reply: Hoch: "Re: IIS 6.0 CGI pipe broken..."
- Reply: Hoch: "Re: IIS 6.0 CGI pipe broken..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
