Home > Forums > Web Platform > Web Application Gallery : Developers & Integrators > This access control list is not in canonical form and therefore cannot be modified

Thread: This access control list is not in canonical form and therefore cannot be modified

Last post 04-22-2009 3:00 PM by stjacobs. 1 replies.

Average Rating Rate It (5)Thank you for the rating!

RSS

Page 1 of 1 (2 items)

Sort Posts:

Shortcuts

Search | Active Posts | Unanswered Posts | View all users

04-19-2009, 5:23 AM

nopsolutions
Joined on 09-18-2008, 6:29 AM
Posts 2

This access control list is not in canonical form and therefore cannot be modified

Reply Contact

I've created web package using "Export Application" tool from IIS 7.0. It generated the following files:

1. archive.xml

<MsDeploy.Application MSDeploy.ObjectResolver.dirPath="Microsoft.Web.Deployment.DirPathObjectResolver" MSDeploy.ObjectResolver.filePath="Microsoft.Web.Deployment.FilePathObjectResolver" MSDeploy.ObjectResolver.createApp="Microsoft.Web.Deployment.CreateApplicationObjectResolver">
<iisApp path="Default Web Site/mySite" MSDeploy.path="2" MSDeploy.MSDeployLinkName="Child1" MSDeploy.MSDeployKeyAttributeName="path" MSDeploy.MSDeployProviderOptions="H4sIAAAAAAAEAO29B2AcSZYlJi9tynt/SvVK1+B0oQiAYBMk2JBAEOzBiM3mkuwdaUcjKasqgcplVmVdZhZAzO2dvPfee++999577733ujudTif33/8/XGZkAWz2zkrayZ4hgKrIHz9+fB8/In6NX/PX+DV+jf/7//6//2/8xP9+o1/r1/g1fo3vfVFM66qpztvxd/PJ+Gm+KqvrRb5sR+lP5nVTVMvPHox3xzvjnVF6si7bdZ1/tszXbZ2Vo/TlelIW098rv35Tvc2Xn93bnZzfO7j/aTa79+l+fu/+r4ue9oY68H59WVeXxSyvv1y11GHz6/wav8av8Rut9LMX2SL/dVZZO/91l9kib369y6xc582v+Wv+er8e0P/1fu1f49f4NX69omiOV6tfD+/9rk/z84zwTKmz9HXR5neX1eqkWizyepq/bqs6/7Ff99f4NX6NH/v1fo1f49f4zfEb/veb4y/87zf8fwDY4Q9iJQEAAA==">
    <contentPath path="Default Web Site/mySite" MSDeploy.path="2" MSDeploy.MSDeployLinkName="contentPath" MSDeploy.MSDeployKeyAttributeName="path" MSDeploy.MSDeployProviderOptions="H4sIAAAAAAAEAO29B2AcSZYlJi9tynt/SvVK1+B0oQiAYBMk2JBAEOzBiM3mkuwdaUcjKasqgcplVmVdZhZAzO2dvPfee++999577733ujudTif33/8/XGZkAWz2zkrayZ4hgKrIHz9+fB8/In6NX/PX+DV+jf/7//6//2/8xP9+o1/r1/g1fo3vfVFM66qpztvxd/PJ+Gm+KqvrRb5sR+lP5nVTVMvPHox3xzvjnVF6si7bdZ1/tszXbZ2Vo/TlelIW098rv35Tvc2Xn93bnZzfO7j/aTa79+l+fu/+r4ue9oY68H59WVeXxSyvv1y11GHz6/wav8av8Rut9LMX2SL/dVZZO/91l9kib369y6xc582v+Wv+er8e0P/1fu1f49f4NX7DabVsASZr578eXv5dn+bnGSGbUo/p66LN7y6r1Um1WOT1NH/dVnX+Y7/ur/Fr/Bo/9uv9Gr/Gr/Gb4zf87zfHX/jfb/j/AGNJ5QAqAQAA">
      <MSDeploy.dirPath path="Default Web Site/mySite" MSDeploy.MSDeployLinkName="contentPath" />
    </contentPath>
    <createApp path="Default Web Site/mySite" MSDeploy.path="2" MSDeploy.MSDeployLinkName="createApp" MSDeploy.MSDeployKeyAttributeName="path" />
</iisApp>
<setAcl path="Default Web Site/mySite/images/thumbs" MSDeploy.path="2" isDest="False" MSDeploy.isDest="2" setAclUser="IUSR" MSDeploy.setAclUser="1" setAclAccess="FullControl" MSDeploy.setAclAccess="1" MSDeploy.MSDeployLinkName="Child2" MSDeploy.MSDeployKeyAttributeName="path" MSDeploy.MSDeployProviderOptions="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" />
<setAcl path="Default Web Site/mySite/files" MSDeploy.path="2" isDest="False" MSDeploy.isDest="2" setAclUser="IUSR" MSDeploy.setAclUser="1" setAclAccess="FullControl" MSDeploy.setAclAccess="1" MSDeploy.MSDeployLinkName="Child3" MSDeploy.MSDeployKeyAttributeName="path" MSDeploy.MSDeployProviderOptions="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" />
</MsDeploy.Application>

2. parameters.xml

And when I use "Import Application" tool from IIS 7.0 I get the following error:

"The package installation failed.

An error occurred when performing this operation.

Details: This access control list is not in canonical form and therefore cannot be modified "

в System.Security.AccessControl.CommonAcl.ThrowIfNotCanonical()

в System.Security.AccessControl.CommonAcl.Purge(SecurityIdentifier sid)

в System.Security.AccessControl.CommonSecurityDescriptor.PurgeAccessControl(SecurityIdentifier sid)

в System.Security.AccessControl.ObjectSecurity.PurgeAccessRules(IdentityReference identity)

в Microsoft.Web.Deployment.SetAclProvider.Add(DeploymentObject source, Boolean whatIf)

в Microsoft.Web.Deployment.SetAclProvider.Update(DeploymentObject source, Boolean whatIf)

в Microsoft.Web.Deployment.DeploymentObject.Update(DeploymentObject source, DeploymentSyncContext syncContext)

в Microsoft.Web.Deployment.DeploymentSyncContext.HandleUpdate(DeploymentObject destObject, DeploymentObject sourceObject)

в Microsoft.Web.Deployment.DeploymentSyncContext.SyncChildrenOrder(DeploymentObject dest, DeploymentObject source)

в Microsoft.Web.Deployment.DeploymentSyncContext.SyncChildren(DeploymentObject dest, DeploymentObject source)

в Microsoft.Web.Deployment.DeploymentSyncContext.ProcessSync(DeploymentObject destinationObject, DeploymentObject sourceObject)

в Microsoft.Web.Deployment.DeploymentObject.SyncToInternal(DeploymentObject destObject, DeploymentSyncOptions syncOptions, PayloadTable payloadTable, ContentRootTable contentRootTable)

в Microsoft.Web.Deployment.DeploymentObject.SyncTo(DeploymentProviderOptions providerOptions, DeploymentBaseOptions baseOptions, DeploymentSyncOptions syncOptions)

в Microsoft.Web.Deployment.DeploymentObject.SyncTo(String provider, String path, DeploymentBaseOptions baseOptions, DeploymentSyncOptions syncOptions)

в Microsoft.Web.Deployment.DeploymentObject.SyncTo(DeploymentWellKnownProvider provider, String path, DeploymentBaseOptions baseOptions, DeploymentSyncOptions syncOptions)

в Microsoft.Web.Management.Packaging.InstallProgressWizardPage.OnWorkerDoWork(Object sender, DoWorkEventArgs e)

в System.ComponentModel.BackgroundWorker.OnDoWork(DoWorkEventArgs e)

в System.ComponentModel.BackgroundWorker.WorkerThreadStart(Object argument)

04-22-2009, 3:00 PM In reply to

stjacobs
Joined on 09-23-2008, 3:09 PM
Redmond
Posts 43

Re: This access control list is not in canonical form and therefore cannot be modified

Reply Contact

Hi Andrei,

Most of the application develper's for the Web Application Gallery are using the guidelines in the Application Packaging Guide - http://learn.iis.net/page.aspx/578/application-packaging-guide-for-the-windows-web-application-gallery/ - which shows how to create a package using a text editor, rather than the "Export Application" feature. Export Application is more often used by MS Deploy users to migrate an application from one system to another, where there is a good understanding of the configuration of both the source and the destination machines.

If you want, I could have someone from the MS Deploy team look at your files. But, if your goal is to have the application in the Web Application Gallery, you will be better off using the methods in the packaging guide. Let me know if you have any questions after that.

Thanks!

-Jake

--
Steve Jacobson (Jake)
Sr. Program Manager - IIS

Page 1 of 1 (2 items)