The cgi process (doing: system("perl ResetCCN.pl");) is running under the same logon account (and running the exact same code: ResetCCN.pl) as when ResetCCN.pl is run directly from a command-line window.
Sure? so the IIS Webserver is running under that account, and not under e.g. "Local System" ?
--shmem
_($_=" "x(1<<5)."?\n".q·/)Oo. G°\ /
/\_¯/(q /
---------------------------- \__(m.====·.(_("always off the crowd"))."·
");sub _{s./.($e="'Itrs `mnsgdq Gdbj O`qkdq")=~y/"-y/#-z/;$e.e && print}
| [reply] |
The authentication is set up for the webhome in question (the one hosting the perl.cgi program); Users coming in via Anon.Access are mapped to a Windows_User_Acct. which is identical to the one used to logon to the server and directly running the ResetCCN.pl pgm.
(The webhome with the CGI tho' is in a directory under the IIS 'Default Web Site', for which the authentication of anon. access is set to the standard local IUSR acct. But that shouldn't affect the specific authentication of the CGI webhome (I guess...)).
Is there a specific security right btw, (dis)/allowing spawning of UI?
/Allan (will sleep on this now...)
| [reply] |