Previous Next

• 10-06-2006, 1:32 AM

  link664 Joined on 10-06-2006, 5:23 AM Posts 10

  Permission Settings in IIS Reply Contact Hi guys, Just installed IIS with MySQL and PHP, and I'm trying to run a PHP app called Wordpress that's used as a content management system for things like blogs.   The PHP app has a gallery plugin that I'm trying to use and thats installed correctly.  The issue I am having is when the gallery plugin tries to create a new gallery, it attempts to make a new folder in the Wordpress directory (which is located in the inetpub/wwwroot folder).  But due to what I assume is incorrect permissions set in IIS, it isn't allowed.  Can anyone help me out with what I should be setting, or even if I'm on the right track? Thanks, Dane.

• 10-06-2006, 7:52 AM

  In reply to

  tomkmvp Joined on 03-20-2003, 10:27 AM Lawrenceville, NJ Posts 3,809	Re: Permission Settings in IIS Reply Contact Sounds reasonable.  Is there any support for Wordpress that would explain the proper security configuration? Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/

• 10-06-2006, 11:08 PM

  In reply to

  link664 Joined on 10-06-2006, 5:23 AM Posts 10	Re: Permission Settings in IIS Reply Contact Well I couldn't find anything there after spending quite a few hours looking, most people are either using apache or unix/linux.  And the gallery plugin is made by a german, so all the documentation and support for that is in german. Dane.

• 10-07-2006, 1:23 AM

  In reply to

  chrisad Joined on 03-06-2004, 1:01 AM Posts 289

  Re: Permission Settings in IIS Reply Contact Hey Dane- You could possibly locate the problem using Authentication & Access Control Diagnostics (AuthDiag) 1.0 because no matter the locale the underlying source code for permission problems are in English.  The particular feature you want to use (which we failed to make exposable enough) is the "Monitor URL Failures" feature that does real-time monitoring of authentication & authorization APIs and determines what is failing. My thoughts and\or steps are the following: Download AuthDiag  Run AuthDiag using %programfiles%\iis resources\authdiag\authdiag.exe From the drop-down, please choose 'Monitor URL Failures' ... Enter the URL where you are failing (i.e. http://localhost/app/vdir .. Click Start Monitor After the IE opens up (and repros), then click Stop Monitoring Click Analyze results  NOTE:  Authdiag does not work remotely, please do this on the Web server itself logged in as Administrator If the results do not show any results that give you helpful information, please let us know - authdiag@microsoft.com. Thanks, ~Chris Former Program Manager IIS Product Unit (Microsoft)

  Tags: authdiag permissions

• 10-07-2006, 10:49 PM

  In reply to

  link664 Joined on 10-06-2006, 5:23 AM Posts 10

  Re: Permission Settings in IIS Reply Contact Hi Chris, Thanks for the reply. I downloaded the AuthDiag program and did what you had suggested but I'm obviously doing it wrong, as all i get in the "Monitoring Results" window is the following:  "System time: Sun. 08 Oct 2006 02:42:53 GMT Initializing AuthMon, it might take a while... Initialization completed, waiting for HTTP requests."  I've tried the directory http://localhost/wordpress and http://localhost/wordpress/wp-admin (where the gallery folder is stored) but still no luck.  What should I b expecting to see here? And would the fact that Wordpress runs off PHP scripts have any effect on the monitoring tool?  Thanks, Dane.

• 10-09-2006, 9:49 AM

  In reply to

  tomkmvp Joined on 03-20-2003, 10:27 AM Lawrenceville, NJ Posts 3,809	Re: Permission Settings in IIS Reply Contact What's the original error message you receive?   Because it's a code access issue, AuthDiag may not catch it.  Something like FileMon will though ... http://www.sysinternals.com/Utilities/Filemon.html Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/

• 10-10-2006, 1:58 AM

  In reply to

  link664 Joined on 10-06-2006, 5:23 AM Posts 10

  Re: Permission Settings in IIS Reply Contact I don't think I've explained myself properly.  I am using a PHP program called Wordpress, which runs using PHP scripts through your web browser (i.e. going to http://localhost/wordpress).  The error I get is inside this program, with one of the plugins for the program, where it says "Unable to create directory" when trying to create a directory in my IIS webroot folder.  So i'm not getting a browser error or anything like that.  The issue I believe is with the permissions.  If you could explain to me which permissions (i.e. read, write, enabling scripts and executables, etc) might affect this then mayb I can track down what is stopping Wordpress from being able to create these directories.  Thanks, Dane.

• 10-10-2006, 3:02 AM

  In reply to

  Bernard Joined on 05-24-2006, 4:30 AM Malaysia Posts 291	Re: Permission Settings in IIS Reply Contact Well, in that case - get filemon as tom posted previously, browse the wordpress page again, then monitor the filemon log to track down the permissions issue. Cheers, Bernard Cheah

• 10-10-2006, 8:31 AM

  In reply to

  tomkmvp Joined on 03-20-2003, 10:27 AM Lawrenceville, NJ Posts 3,809	Re: Permission Settings in IIS Reply Contact Yes ... Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/

• 10-11-2006, 9:16 PM

  In reply to

  link664 Joined on 10-06-2006, 5:23 AM Posts 10	Re: Permission Settings in IIS Reply Contact OK, so I've run that Filemon program, and I get a whole list of requests from various programs.  What exactly should I be looking for here?  Will it be a request coming from firefox, PHP.exe, inetinfo.exe, mysqld-nt.exe, or svchost.exe? Dane.

• 10-11-2006, 10:56 PM

  In reply to

  Bernard Joined on 05-24-2006, 4:30 AM Malaysia Posts 291

  Re: Permission Settings in IIS Reply Contact On the server itself, you can check inetinfo.exe, php.exe, if this is IIS 5, and you have the application in medium/high isolation, then look at dllhost.exe as well. For IIS6 worker process mode, w3wp.exe will be the process, together with php.exe if you are in cgi mode. The idea behind this is to see if filemon can track down any related access denied in its log file....... while you hitting the error of coz (when you simulate the acess of your app) Cheers, Bernard Cheah

• 10-12-2006, 10:26 AM

  In reply to

  tomkmvp Joined on 03-20-2003, 10:27 AM Lawrenceville, NJ Posts 3,809	Re: Permission Settings in IIS Reply Contact You're looking for a hit on the folder where it's trying to create the new folder ... see what user is being denied access ... Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/

• 10-12-2006, 9:32 PM

  In reply to

  link664 Joined on 10-06-2006, 5:23 AM Posts 10

  Re: Permission Settings in IIS Reply Contact OK, when  I run the plugin I get two ACCESS DENIED errors for a PHP folder: 11:20:13 AM    php.exe:1256    CREATE    C:\Program Files\PHP\uploadtemp\php26.tmp    ACCESS DENIED    <COMPUTER NAME>       11:20:13 AM    php.exe:1256    CREATE    C:\Program Files\PHP\uploadtemp\php28.tmp    ACCESS DENIED    <COMPUTER NAME>    And then one for the folder that I'm actually trying to create:   11:20:13 AM    php.exe:1256    CREATE    C:\inetpub\wwwroot\wordpress\wp-content\photos\a    ACCESS DENIED    <COMPUTER NAME>     I have the permissions Read, Write and Scripts Only set for C:\inetpub\wwwroot\wp-content\photos.  Do i have to set the same for every parent folder?  And do I need to set permissions for the PHP folder? If so, how do I do that? Thanks, Dane.

• 10-12-2006, 11:33 PM

  In reply to

  Bernard Joined on 05-24-2006, 4:30 AM Malaysia Posts 291	Re: Permission Settings in IIS Reply Contact In the other field beside the result 'access denied', which shows the computer account name... grant the account permission to write on those folder listed above. Cheers, Bernard Cheah

• 10-13-2006, 3:57 AM

  In reply to

  link664 Joined on 10-06-2006, 5:23 AM Posts 10	Re: Permission Settings in IIS Reply Contact Sorry if its a dumb question, but how do I do that? And how do I do it with the PHP folder when it isn't accessible through the inetmgr?  Thanks, Dane.