Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / .NET Framework / Security / February 2008

Tip: Looking for answers? Try searching our database.

Can't open network files from IIS 6 .net web apps

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Allison Sutherland - 18 Feb 2008 20:41 GMT
Windows 2003 Server SP2 w/ IIS 6 is webserver.
Our ASP web application has this code which is attached to an “OpenDocument”
button on a web form to stream a pdf file to the browser with the pdf file
name and path contained in a database field shown on the form.  If the PDF is
on the local machine it streams no problem.  If the PDF is on another network
server the file cannot be seen despite it’s share UNC path being validate for
the logged on users.

Is there any special configuration or permissions for IIS for streaming
network pdfs to the IE7 browser?

How do you add the webserver ASP.NET account to the network fileserver ACL
list?
it's not a domain account.

Can anyone suggest what we are missing to be able to solve this?
Dominick Baier - 19 Feb 2008 20:04 GMT
In a non-domain environment you need mirrored accounts

a) create a user on the web server
b) add it to the IIS_WPG group
c) configure the IIS AppPool to use this user
d) create the same user (with the same password) on the file server
e) ACL the files for read for that user

should work.

-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

> Windows 2003 Server SP2 w/ IIS 6 is webserver.
> Our ASP web application has this code which is attached to an
[quoted text clipped - 16 lines]
> it's not a domain account.
> Can anyone suggest what we are missing to be able to solve this?

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.