Edit report at http://bugs.php.net/bug.php?id=27051&edit=1
ID: 27051
Updated by: [email protected]
Reported by: ghoffer at globalscape dot com
Summary: Impersonation with FastCGI does not EXEC process as
impersonated user
Status: Closed
Type: Bug
Package: CGI related
Operating System: Windows
PHP Version: 5.3
Assigned To: pajoye
New Comment:
Again, I did check in all possible configurations and it does work.
However please configure impersonation correctly for FastCGI (that's not
the App pool settings).
Previous Comments:
------------------------------------------------------------------------
[2010-03-24 22:45:31] heer2351 at zonnet dot nl
Thanks for your fast response.
I am running the website using an application pool and have configured a
special user for that pool. I use the same user for anonymous access. So
both the website as well as PHP use the same identity. This user has all
the required rights.
Just to test I have given this user rights to %COMSPEC% using cacls.
Same error.
Gave IUSR_xxx rights, same error.
Gave IWAM_xxx rights, same error.
Please check what has changed between 5.2.13 and 5.3.2
------------------------------------------------------------------------
[2010-03-24 22:14:23] [email protected]
Let me copy my note here as well:
Quick note here. It is necessary to give a given IUSR_* the permission
to use cmd.exe (%COMSPEC%). It is recommended not to do it as it may
introduce security issues, obviously. But if you really want to do it,
use:
cacls %COMSPEC% /E /G IUSR_xxxx:R
------------------------------------------------------------------------
[2010-03-24 22:09:25] [email protected]
you have >to give< the permission
------------------------------------------------------------------------
[2010-03-24 22:08:58] [email protected]
It works just fine and you have the permission to the IIS user to
execute the shell. See the other reports about that, I added the
explanation and how to configure it correctly there.
------------------------------------------------------------------------
[2010-03-24 21:43:39] heer2351 at zonnet dot nl
PHP 5.3.2 (cgi-fcgi) (built: Mar 3 2010 20:47:00)
FastCGI DLL Version 7.5.7693.0
Microsoft Windows Server 2003R2
IIS6
Exact same problem - PHP Warning: exec(): Unable to fork
Changed PHP back to:
PHP 5.2.13 (cgi-fcgi) (built: Feb 24 2010 14:37:42)
No fork problem, so it is not a configuration problem.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/bug.php?id=27051
--
Edit this bug report at http://bugs.php.net/bug.php?id=27051&edit=1
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.