Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
More IIS account impersonation psychosis
Message
 
 
To
All
General information
Forum:
Visual FoxPro
Category:
Troubleshooting
Title:
More IIS account impersonation psychosis
Miscellaneous
Thread ID:
01210079
Message ID:
01210079
Views:
67
Win2000 server and IIS5. Does anybody know the strategy that IIS follows with respect to running under IWAM vs IUSR, and which identity it chooses to bestow upon COM objects and DLLs when it invokes them?

For years, we have been using the legacy VFP ODBC driver (vfpodbc.dll) within an ASP app. With some experimentation, it was easy to determine that this DLL was running as IWAM. Recently, we created a VFP COM MTDLL that is also invoked by the same asp app. We registered the MTDLL on the target server with the regsvr32 utility. That's all we did. Again, just from some experimentation, we know that the COM MTDLL assumes the IUSR identity when invoked by IIS. Why this schizophrenia? Beats me. And now, for some reason, after registering the MTDLL, vfpodbc also is assuming the IUSR identity instead of the IWAM identity that it had for years. That breaks our app in some legacy portions of code where on disk, dbf access is granted only to IWAM and not to IUSR.

There are easy workarounds, but I've been urinated off about this kind of thing more than once in the past. Can somebody please explain what is going on? Thanks very much.
Reply
Map
View

Click here to load this message in the networking platform