Edit report at http://bugs.php.net/bug.php?id=27051&edit=1
ID: 27051 Comment by: heer2351 at zonnet dot nl Reported by: ghoffer at globalscape dot com Summary: Impersonation with FastCGI does not EXEC process as impersonated user Status: Closed Type: Bug Package: CGI related Operating System: Windows PHP Version: 5.3 Assigned To: pajoye New Comment: Thanks for your fast response. I am running the website using an application pool and have configured a special user for that pool. I use the same user for anonymous access. So both the website as well as PHP use the same identity. This user has all the required rights. Just to test I have given this user rights to %COMSPEC% using cacls. Same error. Gave IUSR_xxx rights, same error. Gave IWAM_xxx rights, same error. Please check what has changed between 5.2.13 and 5.3.2 Previous Comments: ------------------------------------------------------------------------ [2010-03-24 22:14:23] paj...@php.net Let me copy my note here as well: Quick note here. It is necessary to give a given IUSR_* the permission to use cmd.exe (%COMSPEC%). It is recommended not to do it as it may introduce security issues, obviously. But if you really want to do it, use: cacls %COMSPEC% /E /G IUSR_xxxx:R ------------------------------------------------------------------------ [2010-03-24 22:09:25] paj...@php.net you have >to give< the permission ------------------------------------------------------------------------ [2010-03-24 22:08:58] paj...@php.net It works just fine and you have the permission to the IIS user to execute the shell. See the other reports about that, I added the explanation and how to configure it correctly there. ------------------------------------------------------------------------ [2010-03-24 21:43:39] heer2351 at zonnet dot nl PHP 5.3.2 (cgi-fcgi) (built: Mar 3 2010 20:47:00) FastCGI DLL Version 7.5.7693.0 Microsoft Windows Server 2003R2 IIS6 Exact same problem - PHP Warning: exec(): Unable to fork Changed PHP back to: PHP 5.2.13 (cgi-fcgi) (built: Feb 24 2010 14:37:42) No fork problem, so it is not a configuration problem. ------------------------------------------------------------------------ [2010-02-10 01:00:00] php-bugs at lists dot php dot net No feedback was provided for this bug for over a week, so it is being suspended automatically. If you are able to provide the information that was originally requested, please do so and change the status of the bug back to "Open". ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/bug.php?id=27051 -- Edit this bug report at http://bugs.php.net/bug.php?id=27051&edit=1