Re: IIS6 on Win 2003 server ISAPI loadLibrary security problem

I believe path resolution is documented to be changed on Windows Server 2003
for security reasons.

I'm not certain that system32\inetsrv matters because it's not in the PATH.

ISAPI Extension runs as impersonated identity (comes from authentication -
see my blog entries in the prior response) so all your DLLs need to be
accessible to that identity.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"Laco" <LSopko@xxxxxxxxxxxxxxxxxxx> wrote in message
news:1141722850.215368.140070@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Thx, for respond.

Nop, it is not a ISAPI fiter. It is regular ISAPI extension, Which use
other regular dlls for its internal data processing. There is no
problem to load ISAPI from IIS. it work fine, problem starts later,
when loaded ISAPI need to call one regular dll ( i wrote it ) and this
dll use third party dlls to work on images.

Let me explain better. I have ISAPI: HxIMGServerISAPI.dll just
extend IIS for WebGis procesing
then i have HxJPGServer.dll which i use in all my programs for JPG
management (not only web based) this dll call
many others dlls when work with images.

When i call HxIMGServerISAPI.dll, to process my request, it load
HxJPGServer.dll. Then HxJPGServer.dll loads all other dlls to work.

I wanted to put my HxJPGServer.dll with other dlls in one dir (
different from ...\system32\intesrv) to have some order in things on my
server. And it wan't work, only if all dlls are in ..\system32\inetsrv
it works fine. It seems that command LoadLibrary, which i call to load
HxJPGServer.dll dont make search in dirs which are in PATH system
variable.

laco.



.

Relevant Pages

  • keeping ISAPI extension loaded in Web Server cache
    ... I have 3 ISAPI DLL's that I want to keep loaded always in the web server (to ... the 3 DLLs into the webserver by hitting the appropriate URL ... I know there is a "ScriptUnloadDelay" registry setting under ... Worst case I can just have an executable keep hitting these DLLs through the ...
    (microsoft.public.windowsce.embedded)
  • Re: IIS6 on Win 2003 server ISAPI loadLibrary security problem
    ... it is not a ISAPI fiter. ... other regular dlls for its internal data processing. ... When i call HxIMGServerISAPI.dll, to process my request, it load ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS6 on Win 2003 server ISAPI loadLibrary security problem
    ... I suspect you are talking about an ISAPI Filter ... You just happen to use some haphazard behavior which worked on IIS5; ... forcing you to intentionally make it work on IIS6 for security reasons. ... I have an ISAPI which need load other DLL, which load other dlls. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Memory limit reached with Windows Mobile
    ... If we load DLLs then Data, we can load 12 Mb of DLLs then 13 Mb of ... All native DLLs get loaded ... over 12,85 Mb of VirtualMemory, and that we can't load any Native ...
    (microsoft.public.pocketpc.developer)
  • Re: Memory limit reached with Windows Mobile
    ... 1- Load the same DLL over and over. ... after 60 DLLs loaded with, ... we decided to pre-load all our Native DLLs ...
    (microsoft.public.pocketpc.developer)