Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / Security / February 2004

Tip: Looking for answers? Try searching our database.

Problems after changing Identity Application Pool Settings (sn-yycbk.dll)

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Howard Hoffman - 24 Feb 2004 18:34 GMT
Applies to:  W2K3 Server / IIS6 / Default Isolation Mode / ASP.NET 1.1

We wish to run our ASPNET worker process in a domain account so as to use
RDBMS trusted connections.
We have created a domain account for this purpose.
We have added this domain account to the W2K3 Server
machine IIS_WPG group as per
(http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/ht
ml/cpconidentityapplicationpoolsettings.asp).

We use this machine to host some WebServices.

Our WebService apps write to 2 directories on the web service machines, so
we've added granted IIS_WPG full-control to those directories.

I changed the Application Pool Identity to Configurable, to use the account,
then ran iisreset at the command line.

However, we execute the web service APIs we get unexpected errors.  There
are no errors in the machine's event log, but the WebUI callers of the Web
Service APIs get SoapExceptions with an error message I've never seen
before:

[Server was unable to process request. --> File or assembly name
sn-yycbk.dll, or one of its dependencies, was not found.]

I've also seen the file name 'c6ipnd1t.dll' and 'vlk9wnbd.dll' referenced.

Those file names seem like they could be ASP.NET generated assemblies, but I
cannot find them in %windir%\Microsoft.net\Framework\v1.1.4322\Temporary
ASP.NET Files, or any of its subdirectories.  According to TaskManager, the
w3wp.exe process is indeed running under our domain account, as per the
modified configuration.

Can someone provide any clues as to what I can do to clear up this issue?

Thanks in advance,

Howard Hoffman
richlm - 25 Feb 2004 13:16 GMT
Adding the new account to IIS_WPG is only part of the story. Additional security settings are needed for ASP.NET

Verify that your account (or IIS_WPG) has the following privileges (via local security policy)
- Access this computer from the network
- Deny logon locally
- Log on as a batch job
- Log on as a servic

If this does not help, below are a couple of links with more comprehensive information e.g. on required NTFS permissions

How To: Create a Custom Account to Run ASP.NET (IIS 5.0 specific !!!! - you will need to improvise
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/S
ecNetHT01.as


INFO: Default Permissions and User Rights for IIS 6.
http://support.microsoft.com/default.aspx?kbid=81261

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.