You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cli-users@httpd.apache.org by Luis Fco <lu...@hotmail.com> on 2005/02/04 21:37:14 UTC

[cli-users] How to set permissions? IIS uses ASPNET_WP account, what account uses mod_aspnet?

Hi
 
In IIS I must set the permissions to the ASPNET_WP account. What account
uses mod_aspnet?
I had a problem that I resolved by running the Apache http windows service
with an administrator account. Am I doing the right thing? Because I'm not
sure if it is the best thing that Apache/mod_aspnet has full administrator
privileges.
 
Thanks
 
Luis

Re: [cli-users] How to set permissions? IIS uses ASPNET_WP account, what account uses mod_aspnet?

Posted by "William A. Rowe, Jr." <wr...@rowe-clan.net>.
At 03:07 PM 2/4/2005, William A. Rowe, Jr. wrote:

>  You might want to create a specific APACHE user account
>instead, granting the appropriate access to resources.

To elaborate, the APACHE user account must be granted r/w
access to the Apache\logs and Apache\proxy directories, in
order to write results to both directories.  logs can in
fact be a bit more convoluted, if you pre-create the various
log files, you can deny APACHE the permission to actually
modify the directory if it has the permissions to modify
and append to the log files.  It must have fairly complete
access to the proxy directory in order to maintain the
proxy files.

Bill




---------------------------------------------------------------------
To unsubscribe, e-mail: cli-users-unsubscribe@httpd.apache.org
For additional commands, e-mail: cli-users-help@httpd.apache.org


RE: [cli-users] How to set permissions? IIS uses ASPNET_WP account, what account uses mod_aspnet?

Posted by "William A. Rowe, Jr." <wr...@rowe-clan.net>.
Refer to;

http://httpd.apache.org/docs-2.0/platform/windows.html#winsvc

Most of the time, LocalSystem will only allow a compromise
of the specific box.  It has no authority to the network.

Incidentally, this means that web servers attempting to access
network resources cannot use the 'default' installation.

On a bigger-picture scale, I'll look at moving the 'run as user'
docs up front on that platform page, and perhaps modifying the
installer to prompt for a 'user to run as'.  The ASF installers
never create (nor should they create) arbitrary accounts, but
it would be reasonable to remind users (by choosing which account
to use) that they should take steps to lock down the scope of
the Apache service.

Bill



At 04:06 PM 2/4/2005, Luis Fco wrote:
>Thanks Bill
>
>Already done that, and solved all my problems.
>So, anyone using Apache/mod_aspnet, must start the Apache service whith a
>user other then the SYSTEM?.
>
>Thanks for your support.
>
>Luis
>
>
>> -----Original Message-----
>> From: William A. Rowe, Jr. [mailto:wrowe@rowe-clan.net] 
>> Sent: Friday, February 04, 2005 3:08 PM
>> To: cli-users@httpd.apache.org
>> Subject: Re: [cli-users] How to set permissions? IIS uses 
>> ASPNET_WP account, what account uses mod_aspnet?
>> 
>> 
>> Luis,
>> 
>>   I believe you should be able to go to the Control Panel, 
>> Admin Tools, Services, and change the Apache2 service's 
>> Properties  to 'Log On' as the .\ASPNET user.  The problem, 
>> of course, is the password.  I don't know what side effects 
>> would occur from your modifying this account.
>> 
>>   You might want to create a specific APACHE user account 
>> instead, granting the appropriate access to resources.
>> 
>> Bill
>> 
>> At 02:37 PM 2/4/2005, you wrote:
>> >Hi
>> > 
>> >In IIS I must set the permissions to the ASPNET_WP account. What 
>> >account uses mod_aspnet? I had a problem that I resolved by 
>> running the 
>> >Apache http windows service with an administrator account. 
>> Am I doing the right thing? Because I'm not sure if it is the 
>> best thing that Apache/mod_aspnet has full administrator privileges.
>> > 
>> >Thanks
>> > 
>> >Luis
>> 
>> 
>> 
>> 
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: cli-users-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: cli-users-help@httpd.apache.org
>> 
>> 
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: cli-users-unsubscribe@httpd.apache.org
>For additional commands, e-mail: cli-users-help@httpd.apache.org




---------------------------------------------------------------------
To unsubscribe, e-mail: cli-users-unsubscribe@httpd.apache.org
For additional commands, e-mail: cli-users-help@httpd.apache.org


RE: [cli-users] How to set permissions? IIS uses ASPNET_WP account, what account uses mod_aspnet?

Posted by Information <in...@tren-d.org>.
I AM A PRIVATE INDIVIDUAL THAT GETS ALL YOUR PEOPLES EMAILS ON THE CLI-USER.
ALTHOUGH THE CONTENT LOOKS INTERESTING I DO NOT UNDERSTAND AND YOU PEOPLE
ARE BLOCKING MY COMPUTER PLEASE NOTE THAT I AM NOT INTERESTED IN THE
DISCUSSION THAT YOU HAVE AND CAN YOU HELP TO POINT TO YOUR ORGANIZATION THAT
I RECEIVE ALL THEIR COMMUNICATIONS? PLEASE???
REGARDS
GERARD KORVER

-----Original Message-----
From: William A. Rowe, Jr. [mailto:wrowe@rowe-clan.net] 
Sent: Friday, February 04, 2005 11:08 PM
To: cli-users@httpd.apache.org
Subject: Re: [cli-users] How to set permissions? IIS uses ASPNET_WP account,
what account uses mod_aspnet?

Luis,

  I believe you should be able to go to the Control Panel, Admin Tools,
Services, and change the Apache2 service's Properties  to 'Log On' as the
.\ASPNET user.  The problem, of course, is the password.  I don't know what
side effects would occur from your modifying this account.

  You might want to create a specific APACHE user account instead, granting
the appropriate access to resources.

Bill

At 02:37 PM 2/4/2005, you wrote:
>Hi
> 
>In IIS I must set the permissions to the ASPNET_WP account. What account
uses mod_aspnet?
>I had a problem that I resolved by running the Apache http windows service
with an administrator account. Am I doing the right thing? Because I'm not
sure if it is the best thing that Apache/mod_aspnet has full administrator
privileges.
> 
>Thanks
> 
>Luis




---------------------------------------------------------------------
To unsubscribe, e-mail: cli-users-unsubscribe@httpd.apache.org
For additional commands, e-mail: cli-users-help@httpd.apache.org



--
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.5 - Release Date: 03-02-2005
 

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.5 - Release Date: 03-02-2005
 


---------------------------------------------------------------------
To unsubscribe, e-mail: cli-users-unsubscribe@httpd.apache.org
For additional commands, e-mail: cli-users-help@httpd.apache.org


RE: [cli-users] How to set permissions? IIS uses ASPNET_WP account, what account uses mod_aspnet?

Posted by Luis Fco <lu...@hotmail.com>.
Thanks Bill

Already done that, and solved all my problems.
So, anyone using Apache/mod_aspnet, must start the Apache service whith a
user other then the SYSTEM?.

Thanks for your support.

Luis


> -----Original Message-----
> From: William A. Rowe, Jr. [mailto:wrowe@rowe-clan.net] 
> Sent: Friday, February 04, 2005 3:08 PM
> To: cli-users@httpd.apache.org
> Subject: Re: [cli-users] How to set permissions? IIS uses 
> ASPNET_WP account, what account uses mod_aspnet?
> 
> 
> Luis,
> 
>   I believe you should be able to go to the Control Panel, 
> Admin Tools, Services, and change the Apache2 service's 
> Properties  to 'Log On' as the .\ASPNET user.  The problem, 
> of course, is the password.  I don't know what side effects 
> would occur from your modifying this account.
> 
>   You might want to create a specific APACHE user account 
> instead, granting the appropriate access to resources.
> 
> Bill
> 
> At 02:37 PM 2/4/2005, you wrote:
> >Hi
> > 
> >In IIS I must set the permissions to the ASPNET_WP account. What 
> >account uses mod_aspnet? I had a problem that I resolved by 
> running the 
> >Apache http windows service with an administrator account. 
> Am I doing the right thing? Because I'm not sure if it is the 
> best thing that Apache/mod_aspnet has full administrator privileges.
> > 
> >Thanks
> > 
> >Luis
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: cli-users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: cli-users-help@httpd.apache.org
> 
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: cli-users-unsubscribe@httpd.apache.org
For additional commands, e-mail: cli-users-help@httpd.apache.org


Re: [cli-users] How to set permissions? IIS uses ASPNET_WP account, what account uses mod_aspnet?

Posted by "William A. Rowe, Jr." <wr...@rowe-clan.net>.
Luis,

  I believe you should be able to go to the Control Panel,
Admin Tools, Services, and change the Apache2 service's
Properties  to 'Log On' as the .\ASPNET user.  The problem,
of course, is the password.  I don't know what side effects
would occur from your modifying this account.

  You might want to create a specific APACHE user account
instead, granting the appropriate access to resources.

Bill

At 02:37 PM 2/4/2005, you wrote:
>Hi
> 
>In IIS I must set the permissions to the ASPNET_WP account. What account uses mod_aspnet?
>I had a problem that I resolved by running the Apache http windows service with an administrator account. Am I doing the right thing? Because I'm not sure if it is the best thing that Apache/mod_aspnet has full administrator privileges.
> 
>Thanks
> 
>Luis




---------------------------------------------------------------------
To unsubscribe, e-mail: cli-users-unsubscribe@httpd.apache.org
For additional commands, e-mail: cli-users-help@httpd.apache.org


RE: [cli-users] How to set permissions? IIS uses ASPNET_WP account, what account uses mod_aspnet?

Posted by Information <in...@tren-d.org>.
I AM A PRIVATE INDIVIDUAL THAT GETS ALL YOUR PEOPLES EMAILS ON THE CLI-USER.
ALTHOUGH THE CONTENT LOOKS INTERESTING I DO NOT UNDERSTAND AND YOU PEOPLE
ARE BLOCKING MY COMPUTER PLEASE NOTE THAT I AM NOT INTERESTED IN THE
DISCUSSION THAT YOU HAVE AND CAN YOU HELP TO POINT TO YOUR ORGANIZATION THAT
I RECEIVE ALL THEIR COMMUNICATIONS? PLEASE???

REGARDS

GERARD KORVER


   _____  

From: Luis Fco [mailto:luis_fco_@hotmail.com] 
Sent: Friday, February 04, 2005 10:37 PM
To: cli-users@httpd.apache.org
Subject: [cli-users] How to set permissions? IIS uses ASPNET_WP account,
what account uses mod_aspnet?


Hi
 
In IIS I must set the permissions to the ASPNET_WP account. What account
uses mod_aspnet?
I had a problem that I resolved by running the Apache http windows service
with an administrator account. Am I doing the right thing? Because I'm not
sure if it is the best thing that Apache/mod_aspnet has full administrator
privileges.
 
Thanks
 
Luis


--
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.5 - Release Date: 03-02-2005



-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.5 - Release Date: 03-02-2005