Bug #27051 [Com]: Impersonation with FastCGI does not EXEC process as impersonated user

[email protected] ("heer2351 at zonnet dot nl")
Newsgroups php.bugs
Message-ID <[email protected]>
Edit report at http://bugs.php.net/bug.php?id=27051&edit=1

 ID:               27051
 Comment by:       heer2351 at zonnet dot nl
 Reported by:      ghoffer at globalscape dot com
 Summary:          Impersonation with FastCGI does not EXEC process as
                   impersonated user
 Status:           Feedback
 Type:             Bug
 Package:          CGI related
 Operating System: Windows
 PHP Version:      5.3
 Assigned To:      pajoye

 New Comment:

5.3.3.dev did not solve the problem

Had most versions in my first post:
PHP 5.3.2 (cgi-fcgi) (built: Mar  3 2010 20:47:00)
FastCGI DLL Version 7.5.7693.0
Microsoft Windows Server 2003R2
IIS6 - dll's have version 6.0.3790.1830

Do you need anymore information?


Previous Comments:
------------------------------------------------------------------------
[2010-03-24 23:07:38] [email protected]

Then I need more details about your exact configuration (windows
version, IIS version, fastcgi version, etc.)

------------------------------------------------------------------------
[2010-03-24 23:04:59] heer2351 at zonnet dot nl

FastCGI impersonation is configured correctly and ProcMon shows that
cmd.exe is started with the correct user. The fork error however still
shows.

I am now downloading the php-5.3.3-dev-nts-Win32-VC9-x86-dfsfix.zip file
and will check if that solves the problem.

------------------------------------------------------------------------
[2010-03-24 22:51:11] [email protected]

See my comment and related link in #50542

------------------------------------------------------------------------
[2010-03-24 22:48:17] [email protected]

Again, I did check in all possible configurations and it does work.

However please configure impersonation correctly for FastCGI (that's not
the App pool settings).

------------------------------------------------------------------------
[2010-03-24 22:45:31] heer2351 at zonnet dot nl

Thanks for your fast response.

I am running the website using an application pool and have configured a
special user for that pool. I use the same user for anonymous access. So
both the website as well as PHP use the same identity. This user has all
the required rights. 

Just to test I have given this user rights to %COMSPEC% using cacls.
Same error.
Gave IUSR_xxx rights, same error.
Gave IWAM_xxx rights, same error.

Please check what has changed between 5.2.13 and 5.3.2

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    http://bugs.php.net/bug.php?id=27051


-- 
Edit this bug report at http://bugs.php.net/bug.php?id=27051&edit=1
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.