Quantcast
Viewing all 28504 articles
Browse latest View live

password protected folder

hi dear

i have a program that need to be updated frequently need to use http to get some file from my server from public network.clients are not in our network and could have any OS. i create a vdir and it works good by basic authentication for win XP.but because of security issues i don't want it to use windows base account.program use user pass to authenticate and each  company has it's user pass.now i wanted to secure the update folder by user and password.and restrict connection of each user password to number of license that each customer use.

i really appreciate your advises


IIS 7.5 Application Pool Domain Account Identity

I can't seem to figure this out. I have a classic ASP application running on IIS 7.5 that makes calls to a remote database server. The application connection string settings are configured to use SSPI. I have configured an AppPool with a domain account that has access to the SQL database. The ASP application authentication settings in IIS are configured to use Windows Integrated. User ---> IIS ---> SQL In the past (at least what I think I remember) on IIS 6, the database calls from within the application would use the identity (the domain account) defined on the Application Pool. What I am seeing with IIS 7.5 is not the case. The only way I can get a domain account to make the calls to the SQL server is to use the "Connect As" function on the IIS app. I am not wanting to pass the "users" credentials to the backend database server so this isn't a Kerberos issue. I specifically want IIS 7.5 to use the AppPool identity, which is a Domain Service Account, to be used to establish the database connection. Thanks in advance for your help.

Changed URL and lost site

I downloaded WebMatrix with WordPress and have been trying to figure it out.  I stupidly changed the URL of my site to include a www. (after seeing that suggested on a help video).  I assume that only works if you have a host and aren't using localhost.  Now I can't access my site!  I'm pretty new to all this, so please go easy on me!

Best Practice - Migrating from IIS 6

I have seen so many different ways to do this, what's the best method? I have an old 2003 server I wish to migrate a few of the sites (not all) to my new 2008 R2 server. There are SQL Server hooks as well as an old Helicon isapi rewrite module and the ASP.NET tab is set to v 1.1.4322 

Is there a straight across migration tool?

IIS7 vs IIS8?

Thanks!

Need help setting up a web farm

Hi,

  I'm one of the engineers working on a clean up project for my company. My company's current web application is outdated and our developers are currently working on a new solution, but in the meantime we have been patching multiple errors and it has started to get way out of hand. I am not a developer, but I have been tasked to re-architect the current web enviroment using the current hardware and software. Unfortunetly, I don't have much experience using IIS and need some help trying to figure out the best way to fix the current application while we are waiting on the new one to be completed.

In our current environment, the old engineer used four web frontends with IIS 7 and a F5 load balancer to control web access. The files were syncronized using a local robocopy script ran through a scheduled task every minute on each server (serious...not even joking). even though the files were mostly in sync, they never had a way to sync configuration changes and all four servers consistently had different IIS configurations. The current environment also uses classic asp to control some of the most important functionality, and also uses asp.net to support the features that were unable to be created in classic asp.

I have read and heard a lot of great information on the shared configuration through IIS 7, and have recently deployed it on our new development environment (they never had a development or testing environment prior, all changes were made and tested in production). So far this has worked, but with the F5 load balancer on the production network, I am unsure whether this is a viable solution. I have just started looking at WFF, but I don't know enough about it yet to determine if this will meet our needs. Any information will be greatly appreciated. Thank you in advance.

 

Current Needs:

1. Syncronize application files (current thought is to put in a CIF share and point Websites to the share instead of locally on each server)

2. Syncronize IIS Configuration (shared configuration? or WFF)

3. Use F5 for load balancing user connections

4. Fire previous engineers and development team

 

1 website with 2 different methods of 'secure'/authenticated access

<p>Hi,</p> <p>I'm pretty much a total newb to IIS and this is the first time I'm setting up a server for my organisation as my colleague that usually does this is currently not available.</p> <p>I'm currently trying to configure a site with 2 methods of secure/authenticated access.</p> <p>So I have 2 applications set up in IIS both pointing to the same Physical Path</p> <p><a href="https://www.test.com/a">https://www.test.com/a</a> - uses Basic Auth with an IP address whitelist</p> <p>https://www.test.com/b- uses AD Auth</p><p>The idea being that</p> <p><a href="https://www.test.com/a">https://www.example.com/a</a> is ONLY accessible from a specific set of IP ranges using basic auth</p> <p>and</p> <p><a href="https://www.test.com/b">https://www.example.com/b</a> is ONLY accessible using Active Directory</p> <p>The problem I have is that whilst <a href="https://www.test.com/a">https://www.example.com/a</a> appears to be working as intended <a href="https://www.test.com/b">https://www.example.com/b</a> will also allow for Basic auth as they are sharing the same web.config file, so the AD auth falls back to basic auth - which isn't acceptable</p> <p>Is there anything I can do differently so they both work as intended?<br> Should I have this setup differently?</p> <p>Any ideas anyone?</p><p></p> <p>Thanks</p> <p></p> <p></p> <p></p>

URLScan 3.1 - Empty User Agents

I have URLScan configured to block bot by their User Agents, etc.  This works great.

But every now and again, we're getting bots which aren't reporting anything for their user agents.

How would I configured URLScan to block this?  Thanks..

Version 3 Preview

Any way to get this to work behind a web proxy? I'm unable to sign into Azure and none of my site templates (except for asp.net) are appearing in the list. I tried it at home (no proxy) and it works fine. I would also like to play around with it at work.


ServerManager to update ApplicationHost.con

More specifically, we're building an install program for a couple of websites.  We only support IIS 7.0 or higher and we're using Microsoft.Web.Administration.

In order to implement AD pass through authentication we have to set Authentication properties on some individual files.

The end result of doing this through IIS Manager is an entry in the ApplicationHost.Config file like this.

  <location path="Default Web Site/SmartLynxDataSvc/Trunk/SmartLynxWindowsCredential.svc">    <system.webServer>      <security>        <authentication>          <anonymousAuthentication enabled="false" />          <windowsAuthentication enabled="true" />        </authentication>      </security>    </system.webServer>  </location>

When I try to open a Location section, I get it's missing an element tag or such.

What I plan on doing is using the GetLocalPaths to see if an entry exists.  If it doesn't I need to create a new Location Element.

I'd prefer not to resort to open the file with and editing it directly in code and rather use ServerManager if there is a way.

 

Thanks

 

Database publish error

I am using dotnetnuke with web matrix and I am upgrading to release 7.  I get the following error

11:21:38 AM: An error occurred during execution of the database script. The error occurred between the following lines of the script: "631" and "634". The verbose log might have more information about the error. The command started with the following:
11:21:38 AM: "IF  EXISTS (SELECT * FROM sys.objects WHERE object"
11:21:38 AM:  Could not drop object 'dbo.Portals' because it is referenced by a FOREIGN KEY constraint. http://go.microsoft.com/fwlink/?LinkId=178587

The database exists on the host and on web matrix so I don't know why it is trying to drop it.

405 - HTTP verb used to access this page is not allowed, IIS 7.5

Hi There,

I configured a directory in IIS 7.5 by allowing PUT as a Request Filter (HTTP verb). But when I try to send a file to that directory using PUT Command by HTTP Client, it is giving "405 - HTTP verb used to access this page is not allowed" error.  I just wondering even though I allowed "PUT" even in the top level (Default Web Site), it is giving the same error.

Could some one help me please?

Thanks,

Saman

Recycle process instead of Application Domain

Hello,

In our website we're using some legacy COM components. Those COM components are used using COM interop from our C# website. The problem we are facing has to do with the recycling of the application pool.

When I invoke a recycle manually, using the IIS Manager, the whole native process gets recycled. Because the process gets recycled also the COM components are reset. Everything works fine in that case.

However when changing for example the web.config, only the Application Domain get recycled (within the same native process). That causes the website to fail, because the COM components aren't reset. The COM components also need to be reset. For example because they have a native COM pointer to the application domain the website is running in.

Is it possible to configure IIS in a way that it always recycles the whole native process?

Thanks.

Windows 8 IIS8 (?) asp access

I have installed IIS8 (?) on my new Windows8 and I an trying to open my website as a localhost. When I try with simple html files it is working, but nothing comes out using the actual files using asp and access. I don't understand what is missing.

I have installed everything I have found relating IIS and asp.net. But I am stuck. How to open an asp file?

IIS after ~ 1 day not reachable FROM OUTSIDE

Hello,

I have a problem with a little web application, that queries data by an Ajax-Call every minute from an WCF-Service.
The service is hosted within this web application.
The request method is GET.

After about 1 day, but not always after the exact period of time, the complete web site is not reachable from other hosts.
On the server  I can open the site without problems. The only solution I found is to kill the w3wp.exe, then it works again from outside.

Is there a request limit? Or may the server think there is an attack and blocks these request?

I hope anyone has a hint, this is a serious problem right now!

Greets

Andreas

401 Unauthorized error while accessing SSRS snapshot from C# code

Hi,

We have our application(c#, .net 3.5Sp1) and SSRS 2008 running on one box (windows server 2008 R2) and SQL Server 2008 running on another box.

The C# app code is calling the below url.

http://<hostname>/reportserver?/AppFolderOnSSRS/Snapshots/My Report/08b79d50-9288-47c8-9c46-ff6d83367bda&rs:Snapshot=2013-04-03T11:45:43&rs:SessionID=phjeo1r0jkvreh3zs5acls45&rs:Format=HTML4.0&rc:Toolbar=false

Here is the app code which do this

StringBuilder sb =newStringBuilder(urlAccessUri.GetLeftPart(UriPartial.Path)+"?"+ snapshotConfiguration.linkedReportPath +"&rs:Snapshot="+ snapshotConfiguration.historyId +"&rs:SessionID="+ ctx.SessionId);

HttpWebRequest request =(HttpWebRequest)WebRequest.Create(sb.ToString());
request
.Method="GET";
request
.KeepAlive=false;
request
.Timeout=HttpRequestTimeout;
request
.UseDefaultCredentials=true;
request
.PreAuthenticate=true;

HttpWebResponse response =(HttpWebResponse) request.GetResponse()


In the Reporting Service I have created a role (MyRole) and have assigned 

1.Create Linked Reports
2.View Reports
3.Manage Reports
4.View Resources
5.View Folders
6.Manage Folders
7.Manage Report History
8.View Data Sources
9.View Models
10.Consume Reports

Then I have assigned "MyRole" for AppFolderOnSSRS (in SSRS) to the account under which my C# app is running.

The last line in the above code snippet "HttpWebResponse response = (HttpWebResponse) request.GetResponse()" throws the "The remote server returned an error: (401) Unauthorized" error.

Regards,
Saif


database in PHP and webmatrix2

hi,

i dont know if this the correcy forum but...

when i try to create a database in webmatrix 2 i get this error:

"Unable to create new database. A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: SQL Network Interfaces, error: 26 - Error Locating Server/Instance Specified)"

 

 

 

Best Practice for Syncronising Web Farm (IIS Config Only)

I'm wondering what method is the best for keeping a web farms IIS config the same. Shared config scares me to death after I tested what would happen if the config was not accessible. I tried msdeploy and it seems to work OK. I export the config then import on the other nodes but for some stupid reason the app pools managed code type keeps changing. Source is “no managed code”  on destination is goes to v2.0. I have around 10 sites on this server so some work fine some this option changes. I’m not 100% that all the config gets pushed either..just seems hokey. Server level config.. not sure how I can do that (server level like Handler mapping, mime types etc..at the server level)..

Any suggestions??

 

Thanks.

 

(for you guys that just like to reply to boost your msg count.. don’t bother please.)

IIS 7 HTTP Error Log Location

Is the location path for the IIS 7 HTTP error log configurable?  Where is it defined?

 

Thanks,

MG

Use existing .net Membership authentication for FTP server in IIS7.0

Hi,

I have a asp.net website running on ISS7.0 as the default website with .netFramework v4.0. We want to stand up a ftp server (not on the website directory, but on a seperate directory). But we want to use username and passwords from the asp.net site to log into the ftp server to eleminate maintaining seperate username and password list. We are planning to create a seperate role in our website to allow the users who can use the ftp to upload and download. I have looked into 'Configuring FTP with .NET Membership Authentication in IIS 7' article at the following link

http://www.iis.net/learn/publish/using-the-ftp-service/configuring-ftp-with-net-membership-authentication-in-iis-7

It looks like, this article is about making a website directory as ftp server. How do I make a folder other than the website directory work as ftp with .net Membership authentication in IIS7.0.

Any help is greatly appreciated!

Thanks,

Ana

ARR - Windows Azure - How to handle fail over?

I am using ARR as reverse proxy server for the backend servers in windows azure.Is there any best way to handle fail over scenario?

Viewing all 28504 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>