|
| using apache with mapped drive |
 |
Sat, 02 Jun 2007 16:12:31 -040 |
My appache web programs work great when the database folder resides on the
machiine with apache web server on it.
When I try to use a database folder on another machine that is mapped to a drive
on apache web server, I get an error message "file unknown" or
"file not found."
Is there a way to get apache to recognize mapped drives or network drives.
Thanks
|
| Post Reply
|
| Re: using apache with mapped drive |
 |
Sat, 02 Jun 2007 16:14:59 -040 |
Ira Berkowitz wrote:
> My appache web programs work great when the database folder resides on the
machiine with apache web server on it.
>
> When I try to use a database folder on another machine that is mapped to a
drive on apache web server, I get an error message "file unknown" or
"file not found."
>
> Is there a way to get apache to recognize mapped drives or network drives.
>
From the Apache documentation::
==============================
When Apache is first installed as a service (e.g. with the -i option) it
will run as user "System" (the LocalSystem account). There should be
few
issues if all resources for the web server reside on the local system,
but it has broad security privileges to affect the local machine!
LocalSystem is a very privileged account locally, so you shouldn't
run any shareware applications there. However, it has no network
privileges and cannot leave the machine via any NT-secured mechanism,
including file system, named pipes, DCOM, or secure RPC.
NEVER grant network privileges to the SYSTEM account! Create a new user
account instead, grant the appropriate privileges to that user, and use
the 'Log On As:' option. Select the Start Menu -> Settings -> Control
Panel -> Services -> apache service ... and click the "Startup"
button
to access this setting.
A service that runs in the context of the LocalSystem account
inherits the security context of the SCM. It is not associated with any
logged-on user account and does not have credentials (domain name, user
name, and password) to be used for verification.
The SYSTEM account has no privileges to the network, so shared pages or
a shared installation of Apache is invisible to the service. If you
intend to use any network resources, the following steps should help:
* Select Apache from the Control Panel's Service dialog and click
Startup.
* Verify that the service account is correct. You may wish to
create an account for your Apache services.
* Retype the password and password confirmation.
* Go to User Manager for Domains.
* Click on Policies from the title bar menu, and select User Rights.
* Select the option for Advanced User Rights.
* In the drop-down list, verify that the following rights have been
granted to the selected account:
o Act as part of the operating system
o Back up files and directories
o Log on as a service
o Restore files and directories
* Confirm that the selected account is a member of the Users group.
* Confirm the selected account has access to all document and
script directories (minimally read and browse access).
* Confirm the selected account has read/write/delete access to the
Apache logs directory!
If you allow the account to log in as a user, then you can log in
yourself and test that the account has the privileges to execute the
scripts, read the web pages, and that you can start Apache in a console
window. If this works, and you have followed the steps above, Apache
should execute as a service with no problems.
Note: error code 2186 is a good indication that you need to review the
'Log On As' configuration, since the server can't access a required
network resource.
|
| Post Reply
|
| Re: using apache with mapped drive |
 |
Sun, 03 Jun 2007 01:44:14 -040 |
Michael Thanks for the info. I am unsure what you mean by User Manager for
Domains. Is this part of Windows XP Pro or part of Apache. I can't find anything
called that in the administrative Tools section of control panel.
Michael Nuwer Wrote:
> Ira Berkowitz wrote:
> > My appache web programs work great when the database folder resides on
the machiine with apache web server on it.
> >
> > When I try to use a database folder on another machine that is mapped
to a drive on apache web server, I get an error message "file unknown"
or "file not found."
> >
> > Is there a way to get apache to recognize mapped drives or network
drives.
> >
>
> From the Apache documentation::
> ==============================
> When Apache is first installed as a service (e.g. with the -i option) it
> will run as user "System" (the LocalSystem account). There should
be few
> issues if all resources for the web server reside on the local system,
> but it has broad security privileges to affect the local machine!
>
> LocalSystem is a very privileged account locally, so you shouldn't
> run any shareware applications there. However, it has no network
> privileges and cannot leave the machine via any NT-secured mechanism,
> including file system, named pipes, DCOM, or secure RPC.
>
> NEVER grant network privileges to the SYSTEM account! Create a new user
> account instead, grant the appropriate privileges to that user, and use
> the 'Log On As:' option. Select the Start Menu -> Settings -> Control
> Panel -> Services -> apache service ... and click the
"Startup" button
> to access this setting.
>
> A service that runs in the context of the LocalSystem account
> inherits the security context of the SCM. It is not associated with any
> logged-on user account and does not have credentials (domain name, user
> name, and password) to be used for verification.
>
> The SYSTEM account has no privileges to the network, so shared pages or
> a shared installation of Apache is invisible to the service. If you
> intend to use any network resources, the following steps should help:
>
> * Select Apache from the Control Panel's Service dialog and click
> Startup.
> * Verify that the service account is correct. You may wish to
> create an account for your Apache services.
> * Retype the password and password confirmation.
> * Go to User Manager for Domains.
> * Click on Policies from the title bar menu, and select User Rights.
> * Select the option for Advanced User Rights.
> * In the drop-down list, verify that the following rights have been
> granted to the selected account:
> o Act as part of the operating system
> o Back up files and directories
> o Log on as a service
> o Restore files and directories
> * Confirm that the selected account is a member of the Users group.
> * Confirm the selected account has access to all document and
> script directories (minimally read and browse access).
> * Confirm the selected account has read/write/delete access to the
> Apache logs directory!
>
> If you allow the account to log in as a user, then you can log in
> yourself and test that the account has the privileges to execute the
> scripts, read the web pages, and that you can start Apache in a console
> window. If this works, and you have followed the steps above, Apache
> should execute as a service with no problems.
>
> Note: error code 2186 is a good indication that you need to review the
> 'Log On As' configuration, since the server can't access a required
> network resource.
>
|
| Post Reply
|
| Re: using apache with mapped drive |
 |
Sun, 03 Jun 2007 02:09:29 -040 |
Here is what I did:
Created a new user named ira, gave it adminstrative rights and a password (this
is in Windows XP Pro)
In Control Panel I clicked on Administrative Tools.
Clicked on Services
Clicked on Apache 2.2
Clicked on Log On Tab
Selected This Account radiobutton
typed in .\Ira and the password twice, then apply
Recieved message that my sigin in was accepted.
Restarted Apache
Ran program and recieved "File z:\resource does not exist."
I'm at a lose at what to do next.
Michael Nuwer Wrote:
> Ira Berkowitz wrote:
> > My appache web programs work great when the database folder resides on
the machiine with apache web server on it.
> >
> > When I try to use a database folder on another machine that is mapped
to a drive on apache web server, I get an error message "file unknown"
or "file not found."
> >
> > Is there a way to get apache to recognize mapped drives or network
drives.
> >
>
> From the Apache documentation::
> ==============================
> When Apache is first installed as a service (e.g. with the -i option) it
> will run as user "System" (the LocalSystem account). There should
be few
> issues if all resources for the web server reside on the local system,
> but it has broad security privileges to affect the local machine!
>
> LocalSystem is a very privileged account locally, so you shouldn't
> run any shareware applications there. However, it has no network
> privileges and cannot leave the machine via any NT-secured mechanism,
> including file system, named pipes, DCOM, or secure RPC.
>
> NEVER grant network privileges to the SYSTEM account! Create a new user
> account instead, grant the appropriate privileges to that user, and use
> the 'Log On As:' option. Select the Start Menu -> Settings -> Control
> Panel -> Services -> apache service ... and click the
"Startup" button
> to access this setting.
>
> A service that runs in the context of the LocalSystem account
> inherits the security context of the SCM. It is not associated with any
> logged-on user account and does not have credentials (domain name, user
> name, and password) to be used for verification.
>
> The SYSTEM account has no privileges to the network, so shared pages or
> a shared installation of Apache is invisible to the service. If you
> intend to use any network resources, the following steps should help:
>
> * Select Apache from the Control Panel's Service dialog and click
> Startup.
> * Verify that the service account is correct. You may wish to
> create an account for your Apache services.
> * Retype the password and password confirmation.
> * Go to User Manager for Domains.
> * Click on Policies from the title bar menu, and select User Rights.
> * Select the option for Advanced User Rights.
> * In the drop-down list, verify that the following rights have been
> granted to the selected account:
> o Act as part of the operating system
> o Back up files and directories
> o Log on as a service
> o Restore files and directories
> * Confirm that the selected account is a member of the Users group.
> * Confirm the selected account has access to all document and
> script directories (minimally read and browse access).
> * Confirm the selected account has read/write/delete access to the
> Apache logs directory!
>
> If you allow the account to log in as a user, then you can log in
> yourself and test that the account has the privileges to execute the
> scripts, read the web pages, and that you can start Apache in a console
> window. If this works, and you have followed the steps above, Apache
> should execute as a service with no problems.
>
> Note: error code 2186 is a good indication that you need to review the
> 'Log On As' configuration, since the server can't access a required
> network resource.
>
|
| Post Reply
|
| Re: using apache with mapped drive |
 |
Sun, 3 Jun 2007 11:32:32 +0200 |
Ira Berkowitz wrote
> My appache web programs work great when the database folder resides on the
> machiine with apache web server on it.
>
> When I try to use a database folder on another machine that is mapped to a
> drive on apache web server, I get an error message "file unknown"
or "file
> not found."
>
> Is there a way to get apache to recognize mapped drives or network drives.
--------
In addition to Michael's answer, maybe this article will help:
http://abelleba.metacarpus.com/?p=4
Roland
|
| Post Reply
|
|
|