Previous Next

Thread: HTTP 403.1 Access Denied on HttpHandler POST but not on GET

Last post 06-12-2008 3:19 PM by dcrysler. 2 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (3 items)

Sort Posts:

  • 06-11-2008, 5:43 PM

    • dcrysler
    • Not Ranked
    • Joined on 06-11-2008, 5:04 PM
    • Posts 2
    • dcrysler

    HTTP 403.1 Access Denied on HttpHandler POST but not on GET

    I developed a couple HttpHandlers on a Win2K server and am trying to get them running on a Windows 2003 Server. The handlers are contained in a single dll and I used the Web.Config file to direct any GET, POST, or HEAD requests to the proper handler.  When I issue a GET statement the Handler works just fine, however when I POST back to the same url I receive:

    "HTTP Error 403.1 - Forbidden: Execute access is denied. "  and  "You have attempted to execute a CGI, ISAPI, or other executable program from a directory that does not allow programs to be executed. " 

    I would think that if I did not have execute permissions on an extension that none of the methods would work, not even GET.  Am I wrong or does the GET method never need more than read permission even though you are executing a method in a dll?

    I changed the WebConfig to direct any POST requests to the HEAD handler to rule out any failed execution logic in the post handler.  The head handler does nothing but return a static html string.  The results were the same. I then changed the Web.Config to point any GET requests to post handler and the head handler.  Both handlers executed when initiated as GETs

    I have verified that the virtual directory permissions is set to allow both scripts and executables.  I have also configured the new "Web Server Extensions" to allow both ASP.NET and "All Unknown CGI programs and ISAPI Extensions" to be run   (I figure that I can tighten security once I figure out how to get it working)  I also made sure that both the GET and POST methods are supported in the extension mapping.

    Any clues as to why POST isn't working?

     

  • 06-12-2008, 1:18 PM In reply to

    • anilr
    • Top 10 Contributor
    • Joined on 05-23-2006, 6:13 PM
    • Redmond, WA
    • Posts 966
    • anilr

    Re: HTTP 403.1 Access Denied on HttpHandler POST but not on GET

    Most probably, you have not specified POST in the list of verbs in the scriptmap in IIS/httpHandler in asp.net which maps this handler.

    Anil Ruia
    Senior Software Design Engineer
    IIS Core Server
  • 06-12-2008, 3:19 PM In reply to

    • dcrysler
    • Not Ranked
    • Joined on 06-11-2008, 5:04 PM
    • Posts 2
    • dcrysler

    Re: HTTP 403.1 Access Denied on HttpHandler POST but not on GET

    I had configured the mapping of my file extension (.edm) to the aspnet_isapi.dll using the verbs GET, HEAD, and POST.  Apparently IIS only accepted the GET command because I had spaces after each of the commas.  I changed it to GET,HEAD,POST and everything started working.

Page 1 of 1 (3 items)
Page view counter