IISPassword Issue with history

Hello,
Sorry for a lot of threads but its neccesary. Please read this thread http://forum.hostingcontroller.com/topic.asp?TOPIC_ID=3928 (COMPLETE EXPLAIN ABOUT THE ISSUE AND HC SOLUTION for HC6.1)

At this moment I have HC7 (migrated from HC6.1) and I have the issue that IISPassword doesnt work, years ago, maybe other HC Support, resolved this issue, now I need this solution for HC7. :)

Issue: HC7 doesnt create the user domain_web with read access on the .htpasswd_folder file to the anonymous web user of the site if the protected content are asp files.

Thanks for review it. You can replicated this issue on my production server.

Thanks again.

RN

I have asked support to check this issue on your machine and they will update you by mail.

________________________
HC Support Team
support@hostingcontroller.com
http://hostingcontroller.com
+1-213-341-1419

The unique GOOD solution is to give read access on the .htpasswd_folder file to the anonymous web user. HC you only need change some code in your .aspx files for do it...

Full Control for Network Service and Network is a big securty issue that any can exploit. Dont ask me for demostrate it, I am not hacker but any hacker with these perms can hack a system with these perms.

Thanks!

R.N.

Network service shouldnt be enabled by default no but asp.net sites require network service perms i'm afraid.

__________________
Chris Daley
Dwebs Ltd Director :: Company No. 05603664 :: Phone No. (UK) 0870 803 4423
www.Dhosting.co.uk - Web Hosting, Domain Registration
www.Dwebs.ltd.uk - Web Design & Other Services
My views are my own and not those of my company.

quote:

---

Originally posted by Dhosting.co.uk
[br]Network service shouldnt be enabled by default no but asp.net sites require network service perms i'm afraid.

__________________
Chris Daley
Dwebs Ltd Director :: Company No. 05603664 :: Phone No. (UK) 0870 803 4423
www.Dhosting.co.uk - Web Hosting, Domain Registration
www.Dwebs.ltd.uk - Web Design & Other Services
My views are my own and not those of my company.

---

Yes, It is the point, HC think that with Full CONTROL for Network Service and Network is the solution BUT it is worong. The unique solution is to give read access on the .htpasswd_folder file to the anonymous web user. HC you only need change some code in your .aspx files for do it...

Thanks ....!

R.N.

Build 9.

At this moment this issue has been "solved", BUT one important thing, it is very important add "Network Service" with read access to .htpasswd_folder file for it works.

At this point:
+ HC finally add: read access on the .htpasswd_folder file to the anonymous web user.
~ "Perfect" solution > give also "Network Service" with read access to .htpasswd_folder file.

Regards.

R.N.

Your suggestion has been forwarded to the concerned dept.

________________________
HC Support Team
support@hostingcontroller.com
http://hostingcontroller.com
+1-213-341-1419