Wednesday, 15 February 2012

windows server 2012 - How do you setup an IIS Web App so it can access a network share without an AD? -



windows server 2012 - How do you setup an IIS Web App so it can access a network share without an AD? -

i have 3 windows server 2012 r2 without advertisement in dmz network. 2 servers front end end web servers asp.net , 1 have sql server , network share both front end end servers utilize shared data.

my problem how configure application pool identity , network share asp.net application can read , write network share?

this simple advertisement available when can utilize domain accounts application pool identity there no advertisement available in setup.

i reply own question since succeeded setup server. did:

1) create business relationship same username , password on 3 servers. create sure not expire or must changed.

2) create network share , give new business relationship read/write rights. tested connect front end end servers using new business relationship verify no firewalls in way.

3) included user in iis_iusrs grouping indirectly gives logon batch job rights.

4) run next command grant rights user

aspnet_regiis -ga <your_app_pool_user>

see more: how to: create service business relationship asp.net 2.0 application (msdn)

5) restarted , iis create sure changes accounts grouping membership takes hold if tried utilize account.

c:> net stop /y c:> net start w3svc

6) create application pool , set identity.

this part got stuck error messages when trying set identity.

from iis manager got next error dialog: "there error while performing operation. details: value not fall within expected range."

trying set app pool identity command line receive similar error:

c:> appcmd set config /section:applicationpools /[name='test-pool'].processmodel.identitytype:specificuser /[name='test-pool'].processmodel.username:myaccountname /[name='test-pool'].processmodel.password:p@ssw0rd error ( hresult:80070057, message:failed commit configuration changes. parameter incorrect. )

when remove lastly parameter, password, command succeed changing identity type , setting username did never figure out why not set password retorted editing applicationhost.config file directly. unfortunately the password ending in clear text.

<configuration> ... <system.applicationhost> <applicationpools> ... <add name="test-pool" managedruntimeversion="v4.0"> <processmodel identitytype="specificuser" username="myaccountname" password="p@ssw0rd" /> </add> ... </applicationpools> ... </system.applicationhost> ... </configuration>

7) set web application utilize application , access network share without issues.

iis windows-server-2012 iis-8 windows-server-2012-r2 iis-8.5

No comments:

Post a Comment