windows server 2012 - How do you setup an IIS Web App so it can access a network share without an AD? -
i have 3 windows server 2012 r2 without advertisement in dmz network. 2 servers front end end web servers asp.net , 1 have sql server , network share both front end end servers utilize shared data.
my problem how configure application pool identity , network share asp.net application can read , write network share?
this simple advertisement available when can utilize domain accounts application pool identity there no advertisement available in setup.
i reply own question since succeeded setup server. did:
1) create business relationship same username , password on 3 servers. create sure not expire or must changed.
2) create network share , give new business relationship read/write rights. tested connect front end end servers using new business relationship verify no firewalls in way.
3) included user in iis_iusrs grouping indirectly gives logon batch job rights.
4) run next command grant rights user
aspnet_regiis -ga <your_app_pool_user>
see more: how to: create service business relationship asp.net 2.0 application (msdn)
5) restarted , iis create sure changes accounts grouping membership takes hold if tried utilize account.
c:> net stop /y c:> net start w3svc
6) create application pool , set identity.
this part got stuck error messages when trying set identity.
from iis manager got next error dialog: "there error while performing operation. details: value not fall within expected range."
trying set app pool identity command line receive similar error:
c:> appcmd set config /section:applicationpools /[name='test-pool'].processmodel.identitytype:specificuser /[name='test-pool'].processmodel.username:myaccountname /[name='test-pool'].processmodel.password:p@ssw0rd error ( hresult:80070057, message:failed commit configuration changes. parameter incorrect. )
when remove lastly parameter, password, command succeed changing identity type , setting username did never figure out why not set password retorted editing applicationhost.config file directly. unfortunately the password ending in clear text.
<configuration> ... <system.applicationhost> <applicationpools> ... <add name="test-pool" managedruntimeversion="v4.0"> <processmodel identitytype="specificuser" username="myaccountname" password="p@ssw0rd" /> </add> ... </applicationpools> ... </system.applicationhost> ... </configuration>
7) set web application utilize application , access network share without issues.
iis windows-server-2012 iis-8 windows-server-2012-r2 iis-8.5
No comments:
Post a Comment