| Author |
 Topic  |
|
|
goorootech
New Member
Australia
53 Posts |
 Posted - 04 November 2005 : 19:34:49
|
Hi Guys, just installed Photo Album mod version 1.82 and got this working nicely with not too much fuss aparts from fixing a few typos in the code - EXCELLENT MOD, already have some members uploading pictures 
I want to get ASPEXEC and nconvert working now so I get small thumbnails for two reasons - 1/ to minimise data and speed it up, 2/ to add in the mod so I can see random pics on the main forum page. If I dont do this then the main forum page is going to take forever to load up 
We run this forum on Windows Server 2003 (IIS6) and want ASPEXEC loaded (I've already installed/configured this) and have bumped into the issue of IIS6 allowing execute rights of the nconvert.exe application (which resides in c:\thumbnailer of the server)
The nconvert.exe application for those that don't know it is the program that creates the thumbnail pics and puts them in their repective folders.
The issue, IMHO, is the application pool, rights thingies (lol) of nconvert.exe and IIS6.
I have full control of IIS6 (its our server) and is virtually in its default state (no changes to IIS6 config from when the server was installed)
Search and Google Search are my bestest buddies, but I havent found a step-by-step procedure on fixing this 
Can someone please please help me? I'd be so grateful!
Jason |
regards,
Jason Binder
 |
Edited by - goorootech on 09 November 2005 21:18:25 |
|
|
goorootech
New Member
Australia
53 Posts |
Posted - 08 November 2005 : 18:20:25
|
Anyone?
I'll also contact Wes hopefully for some insight.
EDIT: For some reason I thought it was Proeder's mod?!?, I've corrected this
Jason |
regards,
Jason Binder
|
Edited by - goorootech on 09 November 2005 21:20:46 |
 |
|
|
imweazel
Starting Member
49 Posts |
Posted - 09 November 2005 : 21:34:48
|
I have installed ASPEXEC and it works on win2k and IIS, my personal pc. The install instructions were straight forward, all you need do is register the .dll and ensure the service can interact with the desktop.
From the install instructions:
quote:
Installation: To use this ASP component move the DLL into a subdirectory
(like \winnt\system32 for NT or \windows\system for Win95) and type
regsvr32 aspexec.dll
You MUST go into control panel/services/world wide web publishing service and turn Allow Service to Interact with Desktop on to use this component if you run IIS as a service.
Some users after upgrading to SP3 report that visual apps no longer pop up. Make sure that you have any Inetinfo managed services marked as "Allow to Interact with Desktop" if you want to see visible apps on the server screen. Otherwise they will appear as hidden windows.
|
|
|
|
goorootech
New Member
Australia
53 Posts |
Posted - 09 November 2005 : 21:53:20
|
Yes it works on Windows Server 2000 with IIS5 (not IIS6) because IIS5 does not have all the security improvements that IIS6 has. The problem I'm encountering is I can not get nconvert.exe to execute using the default security settings of IIS6 and no-one really knows how to do it (ive check Internet far and wide!)
Our site runs Windows Server 2003 which has IIS6 installed.
We could probably boil this problems down to "how do you get a website visitor to execute an application on the windows 2003 server via ASPEXEC".
I'm almost certain its to do with execute rights of IIS6.
Jason |
regards,
Jason Binder
|
Edited by - goorootech on 09 November 2005 21:56:59 |
|
|
|
imweazel
Starting Member
49 Posts |
Posted - 09 November 2005 : 22:38:28
|
O.k., did a little digging. I found this AspExec v3.0 on windows 2003 server doesn't work
quote:
For security reasons, pages executed by IIS are prohibited from running any commandline programs (especially those under System32, including cmd.exe). You can break some ACLs or elevate user privileges to "make it work", but realize that you are responsible for compromising your own system's security.
Also, commands/scripts involving CMD.EXE (such as the .cmd files) cannot be launched by pages executed by IIS, and there is no work-around other than rewriting CMD.EXE itself.
Unfortunately, what you want to do can also allow a hacker to easily
compromise your server, so for security reasons we are preventing both
hackers and you from those actions -- even if they worked on prior
Windows/IIS versions.
|
|
|
|
goorootech
New Member
Australia
53 Posts |
Posted - 09 November 2005 : 22:51:03
|
Hmm.. well thats FUBARed!  I certainly dont want to allow execute rights to CMD, I really only want to allow execute rights to one executable on the whole server but because all programs get fired thru CMD I'd have to open up the entire server...
I'll have to find another way.. SURELY there must be a way to securely execute a server side program via a webpage. I'll check and report back.
Back. Looks like I may have found the ticket - later, I'm going to use the example on this webpage to allow rights for nconvert.exe...
http://www.dbase.com/Knowledgebase/INT/WEBAPPHOWTOS/IIS6Config.htm
Jason |
regards,
Jason Binder
|
Edited by - goorootech on 09 November 2005 23:01:47 |
|
|
| |
Topic |
|
Topic Locked
