Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user

Edit report at http://bugs.php.net/bug.php?id=27051&edit=1

 ID:               27051
 Comment by:       heer2351 at zonnet dot nl
 Reported by:      ghoffer at globalscape dot com
 Summary:          Impersonation with FastCGI does not EXEC process as
                   impersonated user
 Status:           No Feedback
 Type:             Bug
 Package:          CGI related
 Operating System: Windows
 PHP Version:      5.3
 Assigned To:      pajoye

 New Comment:

PHP 5.3.2 (cgi-fcgi) (built: Mar  3 2010 20:47:00)
FastCGI DLL Version 7.5.7693.0
Microsoft Windows Server 2003R2
IIS6

Exact same problem - PHP Warning: exec(): Unable to fork 
Changed PHP back to:
  PHP 5.2.13 (cgi-fcgi) (built: Feb 24 2010 14:37:42)

No fork problem, so it is not a configuration problem.


Previous Comments:
------------------------------------------------------------------------
[2010-02-10 01:00:00] php-bugs at lists dot php dot net

No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".

------------------------------------------------------------------------
[2010-02-03 00:38:52] [email protected]

It works just fine here, 5.3.1 or later with II6/7. The initial 

It looks to a configuration problem to me. PLs double check it and come
back if you still experience this problem.

------------------------------------------------------------------------
[2010-02-03 00:13:22] jfjauvin at gmail dot com

This bug seems to be still there, no update for a while.  From my
Process Monitor logs, there is no apparent permission errors. It looks
like cmd.exe is not event launched.

PHP 5.3.1
MSVC9
FastCGI
Microsoft-IIS/7.0


PHP Warning:  exec() [<a href='function.exec'>function.exec</a>]: Unable
to fork ['cmd /c echo Hello World!] in
D:\Inetpub\wwwroot\www.example.com\test.php on line 3


"Sequence","Time of Day","Process
Name","PID","Operation","Path","Result","Detail"
"n/a","12:04:43.1093656
PM","w3wp.exe","4064","CreateFile","D:\Inetpub\wwwroot\www.example.com\test.php\web.config","PATH
NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options:
Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode:
Read, AllocationSize: n/a, Impersonating: DOMAIN\www.example.com"
"n/a","12:04:43.1095972
PM","w3wp.exe","4064","CreateFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Sequential Access, No
Buffering, Attributes: RE, ShareMode: Read, Write, Delete,
AllocationSize: n/a, Impersonating: DOMAIN\www.example.com, OpenResult:
Opened"
"n/a","12:04:43.1097796
PM","w3wp.exe","4064","QueryAllInformationFile","D:\Inetpub\wwwroot\www.example.com\test.php","BUFFER
OVERFLOW","CreationTime: 7/10/2009 11:29:33 AM, LastAccessTime:
7/10/2009 11:29:33 AM, LastWriteTime: 2/2/2010 12:04:35 PM, ChangeTime:
2/2/2010 12:04:35 PM, FileAttributes: A, AllocationSize: 4,096,
EndOfFile: 43, NumberOfLinks: 1, DeletePending: False, Directory: False,
IndexNumber: 0x100000000416b, EaSize: 0, Access: Generic Read, Position:
0, Mode: Sequential Access, No Buffering, AlignmentRequirement: Word"
"n/a","12:04:43.1102377
PM","php-cgi.exe","2760","CreateFile","D:\Inetpub\wwwroot\www.example.com","SUCCESS","Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open,
Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1102797
PM","php-cgi.exe","2760","QueryDirectory","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Filter:
test.php, 1: test.php"
"n/a","12:04:43.1103154
PM","php-cgi.exe","2760","CloseFile","D:\Inetpub\wwwroot\www.example.com","SUCCESS",""
"n/a","12:04:43.1104406
PM","php-cgi.exe","2760","CreateFile","D:\Inetpub\wwwroot","SUCCESS","Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open,
Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1104738
PM","php-cgi.exe","2760","QueryDirectory","D:\Inetpub\wwwroot\www.example.com","SUCCESS","Filter:
www.example.com, 1: www.example.com"
"n/a","12:04:43.1105034
PM","php-cgi.exe","2760","CloseFile","D:\Inetpub\wwwroot","SUCCESS",""
"n/a","12:04:43.1106205
PM","php-cgi.exe","2760","CreateFile","D:\Inetpub","SUCCESS","Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open,
Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1106537
PM","php-cgi.exe","2760","QueryDirectory","D:\Inetpub\wwwroot","SUCCESS","Filter:
wwwroot, 1: wwwroot"
"n/a","12:04:43.1106805
PM","php-cgi.exe","2760","CloseFile","D:\Inetpub","SUCCESS",""
"n/a","12:04:43.1107412
PM","php-cgi.exe","2760","CreateFile","D:\","SUCCESS","Desired Access:
Read Data/List Directory, Synchronize, Disposition: Open, Options:
Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read,
Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1107733
PM","php-cgi.exe","2760","QueryDirectory","D:\Inetpub","SUCCESS","Filter:
Inetpub, 1: Inetpub"
"n/a","12:04:43.1108023
PM","php-cgi.exe","2760","CloseFile","D:\","SUCCESS",""
"n/a","12:04:43.1111529
PM","php-cgi.exe","2760","CreateFile","D:\Inetpub\wwwroot\www.example.com","SUCCESS","Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open,
Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1112066
PM","php-cgi.exe","2760","QueryDirectory","D:\Inetpub\wwwroot\www.example.com\.user.ini","NO
SUCH FILE","Filter: .user.ini"
"n/a","12:04:43.1112443
PM","php-cgi.exe","2760","CloseFile","D:\Inetpub\wwwroot\www.example.com","SUCCESS",""
"n/a","12:04:43.1117452
PM","php-cgi.exe","2760","CreateFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Desired
Access: Generic Read, Disposition: Open, Options: Synchronous IO
Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write,
AllocationSize: n/a, Impersonating: DOMAIN\www.example.com, OpenResult:
Opened"
"n/a","12:04:43.1118254
PM","php-cgi.exe","2760","ReadFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Offset:
0, Length: 43, Priority: Normal"
"n/a","12:04:43.1118720
PM","php-cgi.exe","2760","ReadFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Offset:
0, Length: 43, I/O Flags: Non-cached, Paging I/O, Synchronous Paging
I/O, Priority: Normal"
"n/a","12:04:43.1122877
PM","php-cgi.exe","2760","QueryOpen","D:\Inetpub\wwwroot\www.example.com","SUCCESS","CreationTime:
7/10/2009 11:29:33 AM, LastAccessTime: 2/2/2010 9:52:00 AM,
LastWriteTime: 2/2/2010 9:52:00 AM, ChangeTime: 2/2/2010 9:52:00 AM,
AllocationSize: 4,096, EndOfFile: 4,096, FileAttributes: D"
"n/a","12:04:43.1123637
PM","php-cgi.exe","2760","QueryInformationVolume","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","VolumeCreationTime:
7/10/2009 12:05:39 PM, VolumeSerialNumber: 24A7-59D9, SupportsObjects:
True, VolumeLabel: "
"n/a","12:04:43.1123930
PM","php-cgi.exe","2760","QueryAllInformationFile","D:\Inetpub\wwwroot\www.example.com\test.php","BUFFER
OVERFLOW","CreationTime: 7/10/2009 11:29:33 AM, LastAccessTime:
7/10/2009 11:29:33 AM, LastWriteTime: 2/2/2010 12:04:35 PM, ChangeTime:
2/2/2010 12:04:35 PM, FileAttributes: A, AllocationSize: 4,096,
EndOfFile: 43, NumberOfLinks: 1, DeletePending: False, Directory: False,
IndexNumber: 0x100000000416b, EaSize: 0, Access: Generic Read, Position:
0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"n/a","12:04:43.1124319
PM","php-cgi.exe","2760","ReadFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS","Offset:
0, Length: 43"
"n/a","12:04:43.1125218
PM","php-cgi.exe","2760","CloseFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS",""
"n/a","12:04:43.1128956
PM","php-cgi.exe","2760","QueryOpen","D:\Inetpub\wwwroot\www.example.com","SUCCESS","CreationTime:
7/10/2009 11:29:33 AM, LastAccessTime: 2/2/2010 9:52:00 AM,
LastWriteTime: 2/2/2010 9:52:00 AM, ChangeTime: 2/2/2010 9:52:00 AM,
AllocationSize: 4,096, EndOfFile: 4,096, FileAttributes: D"
"n/a","12:04:43.1131742
PM","php-cgi.exe","2760","QueryOpen","D:\PHP5\cmd.exe","NAME NOT
FOUND",""
"n/a","12:04:43.1134247
PM","php-cgi.exe","2760","QueryOpen","D:\PHP5\cmd.exe","NAME NOT
FOUND",""
"n/a","12:04:43.1137195
PM","php-cgi.exe","2760","QueryOpen","C:\Windows\System32\cmd.exe","FAST
IO DISALLOWED",""
"n/a","12:04:43.1139779
PM","php-cgi.exe","2760","CreateFile","C:\Windows\System32\cmd.exe","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
Impersonating: DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1140326
PM","php-cgi.exe","2760","QueryBasicInformationFile","C:\Windows\System32\cmd.exe","SUCCESS","CreationTime:
1/19/2008 12:34:23 AM, LastAccessTime: 1/19/2008 12:34:23 AM,
LastWriteTime: 1/19/2008 2:33:04 AM, ChangeTime: 2/2/2010 11:43:33 AM,
FileAttributes: A"
"n/a","12:04:43.1140530
PM","php-cgi.exe","2760","CloseFile","C:\Windows\System32\cmd.exe","SUCCESS",""
"n/a","12:04:43.1143525
PM","php-cgi.exe","2760","QueryOpen","C:\Windows\System32\cmd.exe","FAST
IO DISALLOWED",""
"n/a","12:04:43.1146062
PM","php-cgi.exe","2760","CreateFile","C:\Windows\System32\cmd.exe","SUCCESS","Desired
Access: Read Attributes, Disposition: Open, Options: Open Reparse Point,
Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a,
Impersonating: DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1146850
PM","php-cgi.exe","2760","QueryBasicInformationFile","C:\Windows\System32\cmd.exe","SUCCESS","CreationTime:
1/19/2008 12:34:23 AM, LastAccessTime: 1/19/2008 12:34:23 AM,
LastWriteTime: 1/19/2008 2:33:04 AM, ChangeTime: 2/2/2010 11:43:33 AM,
FileAttributes: A"
"n/a","12:04:43.1147056
PM","php-cgi.exe","2760","CloseFile","C:\Windows\System32\cmd.exe","SUCCESS",""
"n/a","12:04:43.1150613
PM","php-cgi.exe","2760","CreateFile","C:\Windows\System32\cmd.exe","SUCCESS","Desired
Access: Read Data/List Directory, Execute/Traverse, Read Attributes,
Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
AllocationSize: n/a, Impersonating: DOMAIN\www.example.com, OpenResult:
Opened"
"n/a","12:04:43.1151266
PM","php-cgi.exe","2760","CreateFileMapping","C:\Windows\System32\cmd.exe","FILE
LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection,
PageProtection: PAGE_EXECUTE"
"n/a","12:04:43.1151895
PM","php-cgi.exe","2760","CreateFileMapping","C:\Windows\System32\cmd.exe","SUCCESS","SyncType:
SyncTypeOther"
"n/a","12:04:43.1152680
PM","php-cgi.exe","2760","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Image File Execution Options\cmd.exe","NAME NOT
FOUND","Desired Access: Query Value, Enumerate Sub Keys"
"n/a","12:04:43.1153714
PM","php-cgi.exe","2760","CloseFile","C:\Windows\System32\cmd.exe","SUCCESS",""
"n/a","12:04:43.1155641
PM","php-cgi.exe","2760","CreateFile","D:\","SUCCESS","Desired Access:
Read Data/List Directory, Synchronize, Disposition: Open, Options:
Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read,
Write, Delete, AllocationSize: n/a, Impersonating:
DOMAIN\www.example.com, OpenResult: Opened"
"n/a","12:04:43.1156289
PM","php-cgi.exe","2760","QueryDirectory","D:\PHP5","SUCCESS","Filter:
PHP5, 1: PHP5"
"n/a","12:04:43.1157083
PM","php-cgi.exe","2760","CloseFile","D:\","SUCCESS",""
"n/a","12:04:43.1158982
PM","php-cgi.exe","2760","QueryOpen","D:\PHP5","SUCCESS","CreationTime:
1/4/2010 12:15:47 PM, LastAccessTime: 2/2/2010 11:42:26 AM,
LastWriteTime: 2/2/2010 11:42:26 AM, ChangeTime: 2/2/2010 11:42:26 AM,
AllocationSize: 12,288, EndOfFile: 12,288, FileAttributes: D"
"n/a","12:04:43.1163648
PM","w3wp.exe","4064","CloseFile","D:\Inetpub\wwwroot\www.example.com\test.php","SUCCESS",""

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    http://bugs.php.net/bug.php?id=27051


-- 
Edit this bug report at http://bugs.php.net/bug.php?id=27051&edit=1