|
| Product |
| FileUp |
| Version |
| 2.x, 3.x |
| Title |
Error occurs when saving files to a network share
|
| Problem |
"SoftArtisans.SAFile.1 error 80020009"
By default, IIS executes as the anonymous user, IUSR_Machinename. IUSR_Machinename is a local NT account that does not have network access to file shares. A web server’s local IUSR account will fail authentication on the file server.
|
| Solution |
There are three ways to configure security to enable uploads to a network
file share, using anonymous authentication:
- Create identical local accounts (e.g. IUSR_FileUp) on the web server and file server. The two accounts must have the same username and password. On the web server, use this account for anonymous access to your web-site. On the file server, grant this account read, write, and delete privileges to the upload directory.
To create a new user (Do this on both servers),
- Go to Start/Program Files/Administrative Tools/User Manager.
- Open the User menu, and select New User.
- Enter a username and password for the new user.
To use the new account for anonymous access to the web-site,
- Enter the Microsoft Management Console.
- Right click on the Default Web Site and choose Properties.
- Choose the Directory Security tab.
- Under Anonymous Access and Authentication Control, choose the Edit button.
- Uncheck Enable Automatic Password Synchronization.
- Browse to select the account, and enter the password.
To grant the new user access to the shared folder on the file server,
- Right-click the shared folder.
- Open Properties.
- Select the Security tab.
- Select Permissions.
- In the Directory Permissions dialog box, select Add.
- In "Add Users and Groups," display the local server name in the "Display Names From" drop-down list box.
- Highlight the desired account in the scroll box, and click Add.
- In the Permissions window, select "Modify".
-
Use domain accounts for anonymous authentication on the web server and file server.
- Follow the directions above to select an account to be used for anonymous authentication on your web-site. When browsing for an account, select a domain account (Make sure that the domain name appears in the “List Names From” drop-down box.).
- Follow the directions above to grant the new user access to the shared folder on the file server. When browsing for an account, select a domain account (Make sure that the domain name appears in the “List Names From” drop-down box.).
-
Clone the IUSR account on the web server to a local account on the file server.
Attached is a file called iusrpw.vbs. If you run it on the web server, it will output the username and password for the IUSR account stored in IIS's metabase. You will need to copy these down and create a user on the file server with the same credentials. The new username should match AnonymousUserName and the password should match AnonymousUserPass that were outputted by running iusrpw.vbs on the web server.
To create a new user (do this on the file server only),
- Go to Start/Program Files/Administrative Tools/User Manager.
- Open the User menu, and select New User.
- Enter a username (e.g. IUSR_WebServer) and password (obtained from iusrpw.vbs) for the new user.
To grant the new user access to the shared folder on the file server,
- Right-click the shared folder.
- Open Properties.
- Select the Security tab.
- Select Permissions.
- In the Directory Permissions dialog box, select Add.
- In "Add Users and Groups," display the local server name in the "Display Names From" drop-down list box.
- Highlight the desired account in the scroll box, and click Add.
- In the Permissions window, select "Modify".
Basic Authentication or Kerberos can also be used for saving to a network share if the authenticated domain account has access to the network file share.
For more information on authentication with IIS see this article: IIS Authentication |
| Attachments |
Attachments/KB18_files1.zip
|
| Created : 5/23/2003 3:31:56 PM (last modified : 5/23/2003 3:32:15 PM) |
|
