About 3 months ago I posted a message to this list asking for help in
opening a network file from an ASP page using Perlscript. The script run
from the command line worked fine but failed whenever I ran it from web
page. The error was permission denied. Originally I thought the problem was
Perl related so posted message here. Over time I realized it was probably an
IIS problem. I tried numerous suggestions, including making IIS_USR a domain
account, etc., etc. Nothing worked.

But yesterday I got an email from someone reading list archives and asking
if I'd ever found a solution. I hadn't but this prompted me to search
through archives for other similar messages. I found one that pointed me to:
http://msdn.microsoft.com/workshop/server/feature/security.asp?

Though it's dated 10/97 and refers to IIS 3.0 the information still seems
useful. Under the delegation section I found this line: "Using Windows NT
Challenge/Response, there is no way a process relying on impersonation can
access so much as a test file on another Windows NT box." Since that's what
my IIS/ASP/Perlscript scripts tried to do I figured this was the root cause.

The solution, which I think can only be safely used on an Intranet, is to
change Authentication from Challenge/Response to Basic. I did this for the
specific web that needed to access network files. When I did so  I got a
warning saying how insecure Basic Authetication was, this being due to
password being sent as cleartext. Once I did however I was able to open the
network files I needed to. You'd think that there'd be some way around this
problem using Challenge/Response but as far as I can see there isn't.

In any case I'm posting this here just in case anyone else runs into same
problem and would prefer not to beat their head against wall for months as I
did.





_______________________________________________
Perl-Win32-Web mailing list
[EMAIL PROTECTED]
http://listserv.ActiveState.com/mailman/listinfo/perl-win32-web

Reply via email to