[Mapserver-users] CGI Error - Resolution - Permissions with IIS
Ed McNierney
ed at topozone.com
Tue Aug 19 08:04:36 EDT 2003
This is a multi-part message in MIME format.
------_=_NextPart_001_01C3664A.0F1D9990
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Dustin -
=20
Unfortunately, many folks seem to jump in to using MapServer as the
first CGI application they try to run, and they don't invest the time
necessary to understand how CGI applications are run by their Web
server.
=20
We run MapServer under IIS on Windows and Apache on Linux. IIS doesn't
create any more "headaches" for us than Apache - in fact, we've had to
work through more issues with Apache than IIS - but in most cases (and
in your case) each server works well, reasonably, consistently, and
understandably. However, you do need to take the time to learn how it
operates.
=20
IIS, like any other application running on Windows, runs under the
Windows security model in which every program is run in a particular
security context, which is essentially a user context. By default,
"anonymous" Web visitors coming to your site are assigned the security
context of the IUSR_machinename account, and everything they do is run
as if they were a user sitting at the console logged in with that user
account. If you were sitting at a console and wanted to run a program,
and you didn't have access to run one of the DLLs that program needed,
you couldn't run it. The IUSR_machinename account is (wisely) given
generally limited permissions and you need to make sure you give it the
rights it needs.
=20
This question has been answered - in one form or another - several times
on this list (often by me <g>). If you search the archives I'm sure you
can find more material on it.
=20
- Ed
=20
Ed McNierney
President and Chief Mapmaker
TopoZone.com / Maps a la carte, Inc.
73 Princeton Street, Suite 305
North Chelmsford, MA 01863
Phone: (978) 251-4242 Fax: (978) 251-1396
ed at topozone.com
=20
-----Original Message-----
From: Dustin Harrison [mailto:dustinlharrison at yahoo.com]=20
Sent: Tuesday, August 19, 2003 12:55 AM
To: mapserver-users at lists.gis.umn.edu
Subject: [Mapserver-users] CGI Error - Resolution - Permissions with IIS
=20
Unfornunately a number of us have committed to using IIS as a web server
and have thus inherited the headaches of this system. I have recently
been up against a configuration issue where I recieved a CGI Error from
IIS and I could not resolve it, even by going back to different
Mapserver builds with less and less dependencies (the problem started
when I attempted to install Mapserver with a mapscript build).
=20
The final resolution to the problem involved giving pdflib.dll
permissions to be read and run by IUSR_machinename I can now run
mapserver. In addtion I was unable to use dl() to open
php_mapscript40.dll or php_proj.dll however this problem was also solved
by the new permissions. This is the only file I had to explicity set
(except of course mapserver.exe, php_mapscript40.dll, php_proj.dll).
=20
This doesn't seem to make sense. I'd appreciate any feedback/insight on
this particular case, but more importantly I wanted to post this to
hopefully help anyone that also had this problem.
_____ =20
Do you Yahoo!?
Yahoo! SiteBuilder
<http://us.rd.yahoo.com/evt=3D10469/*http:/sitebuilder.yahoo.com> - =
Free,
easy-to-use web site design software
------_=_NextPart_001_01C3664A.0F1D9990
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 10 (filtered)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
p
{margin-right:0in;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle18
{font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=3DEN-US link=3Dblue vlink=3Dblue>
<div class=3DSection1>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>Dustin –</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'> </span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>Unfortunately, many folks seem to =
jump in
to using MapServer as the first CGI application they try to run, and =
they don’t
invest the time necessary to understand how CGI applications are run by =
their
Web server.</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'> </span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>We run MapServer under IIS on =
Windows and
Apache on Linux. IIS doesn’t create any more =
“headaches”
for us than Apache – in fact, we’ve had to work through more =
issues
with Apache than IIS – but in most cases (and in your case) each =
server
works well, reasonably, consistently, and understandably. However, =
you do
need to take the time to learn how it operates.</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'> </span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>IIS, like any other application =
running on
Windows, runs under the Windows security model in which every program is =
run in
a particular security context, which is essentially a user =
context. By
default, “anonymous” Web visitors coming to your site are =
assigned
the security context of the IUSR_machinename account, and everything =
they do is
run as if they were a user sitting at the console logged in with that =
user
account. If you were sitting at a console and wanted to run a =
program,
and you didn’t have access to run one of the DLLs that program =
needed,
you couldn’t run it. The IUSR_machinename account is =
(wisely) given
generally limited permissions and you need to make sure you give it the =
rights
it needs.</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'> </span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>This question has been answered =
– in
one form or another – several times on this list (often by me
<g>). If you search the archives I’m sure you can find =
more
material on it.</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'> </span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'> =
-
Ed</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'> </span></font></p>
<div>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>Ed McNierney</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>President and Chief =
Mapmaker</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>TopoZone.com / Maps a la carte, =
Inc.</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>73 Princeton Street, Suite =
305</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>North Chelmsford, MA =
01863</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>Phone: (978) 251-4242 Fax: =
(978)
251-1396</span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'>ed at topozone.com</span></font></p>
</div>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'> </span></font></p>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D2 =
face=3DTahoma><span
style=3D'font-size:10.0pt;font-family:Tahoma'>-----Original =
Message-----<br>
<b><span style=3D'font-weight:bold'>From:</span></b> Dustin Harrison
[mailto:dustinlharrison at yahoo.com] <br>
<b><span style=3D'font-weight:bold'>Sent:</span></b> Tuesday, August 19, =
2003
12:55 AM<br>
<b><span style=3D'font-weight:bold'>To:</span></b>
mapserver-users at lists.gis.umn.edu<br>
<b><span style=3D'font-weight:bold'>Subject:</span></b> =
[Mapserver-users] CGI
Error - Resolution - Permissions with IIS</span></font></p>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
face=3D"Times New Roman"><span
style=3D'font-size:12.0pt'> </span></font></p>
<div>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
face=3D"Times New Roman"><span
style=3D'font-size:12.0pt'>Unfornunately a number of us have committed =
to using
IIS as a web server and have thus inherited the headaches of this =
system.
I have recently been up against a configuration issue where I recieved a =
CGI
Error from IIS and I could not resolve it, even by going back to =
different
Mapserver builds with less and less dependencies (the problem started =
when I
attempted to install Mapserver with a mapscript =
build).</span></font></p>
</div>
<div>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
face=3D"Times New Roman"><span
style=3D'font-size:12.0pt'> </span></font></p>
</div>
<div>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
face=3D"Times New Roman"><span
style=3D'font-size:12.0pt'>The final resolution to the problem involved =
giving
pdflib.dll permissions to be read and run by IUSR_machinename I =
can now
run mapserver. In addtion I was unable to use dl() to open
php_mapscript40.dll or php_proj.dll however this problem was also solved =
by the
new permissions. This is the only file I had to explicity set =
(except of
course mapserver.exe, php_mapscript40.dll, =
php_proj.dll).</span></font></p>
</div>
<div>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
face=3D"Times New Roman"><span
style=3D'font-size:12.0pt'> </span></font></p>
</div>
<div>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
face=3D"Times New Roman"><span
style=3D'font-size:12.0pt'>This doesn't seem to make sense. I'd =
appreciate
any feedback/insight on this particular case, but more importantly I =
wanted to
post this to hopefully help anyone that also had this =
problem.</span></font></p>
</div>
<div class=3DMsoNormal align=3Dcenter =
style=3D'margin-left:.5in;text-align:center'><font
size=3D3 face=3D"Times New Roman"><span style=3D'font-size:12.0pt'>
<hr size=3D1 width=3D"100%" align=3Dcenter>
</span></font></div>
<p class=3DMsoNormal style=3D'margin-left:.5in'><font size=3D3 =
face=3D"Times New Roman"><span
style=3D'font-size:12.0pt'>Do you Yahoo!?<br>
<a =
href=3D"http://us.rd.yahoo.com/evt=3D10469/*http:/sitebuilder.yahoo.com">=
Yahoo!
SiteBuilder</a> - Free, easy-to-use web site design =
software</span></font></p>
</div>
</body>
</html>
=00
------_=_NextPart_001_01C3664A.0F1D9990--
More information about the mapserver-users
mailing list