Hi,

I have a Perl CGI script running on Windows through IIS. This script needs to be run under a special user ID in order to access files, other Perl scripts, programs and network shares.

This is currently achieved by setting this ID as the anonymous access ID within IIS. On accessing the site the user initially runs an authentication script which is launched using integrated Windows authentication. If this is successful, the user is passed to a main website, the scripts of which run under the anonymous access ID. I've also ensured that no-one can skip the authentication script by having it create a session file on the server (using CGI::Session) and making all subsequent scripts launched check for the validity of this session.

Someone has recently recommended that I change the set up so that, instead of all scripts launching automatically under the special ID, I use integrated Windows authentication on these scripts as well, but add code so that they assume the special ID when launched (for example using the RunAs command or the LogonAsUser() function in Win32::AdminMisc). My question is, is this more secure or does it have any benefits over the exisiting security set-up?

Any comments would be appreciated.

thanks,
A

In reply to Securing a CGI script by qadwjoh

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.