Results 1 to 8 of 8
  1. #1
    Join Date
    Jul 2004
    Posts
    10

    Unanswered: Create folder on fileserver from webserver

    Hi

    I need to be able to create a folder on a fileserver from the webserver using ASP. This has to be done without giving every one in the anonymous user account (IUSER) r/w acess. But the problem is that from ASP every user is IUSER. Please help me?

    Thanks

    Brian

  2. #2
    Join Date
    Jul 2003
    Location
    SoCal
    Posts
    721
    So you have some users you do, and some you don't, want to give access to create folders on your fileserver from a web application?
    That which does not kill me postpones the inevitable.

  3. #3
    Join Date
    Jul 2004
    Posts
    10
    Yes.

    Some can create and some are not allowed to do sow. But to the fileserver they are all anonymous user, when I use FSO (FileSystemObject) in ASP.

  4. #4
    Join Date
    Jul 2003
    Location
    SoCal
    Posts
    721
    Then what you should probably do is have a login, authenticate against the NT domain or LDAP server, check for group membership, and if they have access (aka: they are in a specific group), you programically allow them to create the folder/files, otherwise you don't even present the option.
    That which does not kill me postpones the inevitable.

  5. #5
    Join Date
    Jul 2004
    Posts
    10
    Yep I could do that, but it will leave the fileserver vide open. Because it requires that you give R/W access to all users. Because when you use FSO on the web server, you connect the fileserver as anonymous user
    Last edited by crazyreds; 07-26-04 at 04:03.

  6. #6
    Join Date
    Jul 2003
    Location
    SoCal
    Posts
    721
    Well, not exactly, only the area to the fileserver that people need to write to. So segment off a directory where the IUSR has r/w access, and the rest of the server IUSR doesn't.

    You can't have the system impersonate the user who is currently on the system because you'd have to shut down IIS, change the user IIS uses, then start the server again, all dynamically. You're going to have to do it programmically and trust your security model and users.
    That which does not kill me postpones the inevitable.

  7. #7
    Join Date
    Jul 2004
    Posts
    10
    Is is not possible to create a user on the fileserver(that have R/W), and impersonate the users on the webserver as the user on the file server?

  8. #8
    Join Date
    Jul 2003
    Location
    SoCal
    Posts
    721
    What you'd need to do is use an account on an NT domain that has R/W access to the file server that the web server could impersonate. You have to remember that the account that IIS runs as isn't there to be used to allow or disallow access to certain folders on your system, it's there because it needs to have rights to execute scripts and access resources. If you need anything beyond that, you've gotta code it.
    That which does not kill me postpones the inevitable.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •