c# - Trouble with window authentication on IIS 7 -
i trying set test server try out asp.net (3.5) web applications before they're moved production. want mirror settings in iis production server. on web app, application pool set classic .net apppool identity networkservice , windows authentication enabled. when attempt access app on test server error "the execute permission denied on object 'gettable', database 'databasename', schema 'xxx'. realize can add network account stored procedures security shouldn't have - works in production without it.
i using restored copy of production database permissions identical between two. did have add querying test server name (i.e. xxx\test$) database security in sql server gain access database, shouldn't have add other local network permissions included in security logins of sql (public).
in windows event log* on test server piece of error detail bothers me because "thread account name nt authority\network service compared when permission error thrown on production server thread account name name of user.
i think need test server recognize real user. (obviously) not understand security fullest web apps yet. can suggest other areas me investigate? did research i'm finding things how change apppool account, or identity, not piece troubleshoots permissions between client web server database server. btw production , test databases on same server. product , test applications on different servers (both server 2008/iis 7).
there 1 difference: asp.net 1.1 application pool is not installed on iis on test server. issue?
*windows event log snippet:
request information: request url: http://server/appname/default.aspx request path: /appname/default.aspx user host address: xx.xxx.xx.xx user: xxx\username authenticated: true authentication type: negotiate **thread account name: nt authority\network service** btw if move test app production server in new folder, works fine. problem test server configuration.
answer: set active directory iis server "trust computer delegation". found answer 2007 entry posted plq in this: microsoft asp.net forum
answer: set active directory iis server "trust computer delegation". found answer 2007 entry posted 'plq' in forum: microsoft asp.net forum
Comments
Post a Comment