403 Error on CGI pages in IIS 6.0

I'm trying to set up an Application Pool for use with a Perl CGI application
on IIS 6.0. I am using a custom user (among other reasons, I need to set up
different environment settings for each application). I added the user to
the IIS_WPG group, set NTFS permissions on the file system, enables the Perl
CGI IIS exension, and added "adjust memory quotas for a process" and
"replace a process level token" to the user in the local security policy.

If I run as the user in a command shell, it works.
If I request a static page in the application's virtual-directory, it works
If I activate ASP and run an ASP script in the application's virtual
directory, it works
If I change the application pool's user to Network Service or the IWAM_
account, and run a Perl CGI script, it works

But running the same script in the same app-pool as my user, I get a 403
error.

I am at wits end and would greatly appreciate any pointers.

Issac

David
Sun May 09 21:45:07 CDT 2004

Check in the Web Server's log file for the specific 403 error that you got.
It's probably 403 sub-status 18.

Make sure to restart IIS AFTER you change the user privileges and IIS_WPG
membership. Recycling app pool or restarting website is not enough.

Otherwise, the instructions look good and should work. I just tried it out
with Perl and it worked for me.

--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Issac Goldstand" <isaac@cpan.org> wrote in message
news:uKFha9gNEHA.3452@TK2MSFTNGP10.phx.gbl...
I'm trying to set up an Application Pool for use with a Perl CGI application
on IIS 6.0. I am using a custom user (among other reasons, I need to set up
different environment settings for each application). I added the user to
the IIS_WPG group, set NTFS permissions on the file system, enables the Perl
CGI IIS exension, and added "adjust memory quotas for a process" and
"replace a process level token" to the user in the local security policy.

If I run as the user in a command shell, it works.
If I request a static page in the application's virtual-directory, it works
If I activate ASP and run an ASP script in the application's virtual
directory, it works
If I change the application pool's user to Network Service or the IWAM_
account, and run a Perl CGI script, it works

But running the same script in the same app-pool as my user, I get a 403
error.

I am at wits end and would greatly appreciate any pointers.

Issac

Issac
Mon May 10 04:57:02 CDT 2004

The error is sub-status 19:
2004-05-10 09:54:08 xxx.xxx.xxx.xxx GET /scripts/test.cgi - 443 -
xxx.xxx.xxx.xxx
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) 403 19
1314


After restarting everything it still doesn't work.

"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:ujytYjjNEHA.1916@TK2MSFTNGP11.phx.gbl...
> Check in the Web Server's log file for the specific 403 error that you
got.
> It's probably 403 sub-status 18.
>
> Make sure to restart IIS AFTER you change the user privileges and IIS_WPG
> membership. Recycling app pool or restarting website is not enough.
>
> Otherwise, the instructions look good and should work. I just tried it
out
> with Perl and it worked for me.
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //
> "Issac Goldstand" <isaac@cpan.org> wrote in message
> news:uKFha9gNEHA.3452@TK2MSFTNGP10.phx.gbl...
> I'm trying to set up an Application Pool for use with a Perl CGI
application
> on IIS 6.0. I am using a custom user (among other reasons, I need to set
up
> different environment settings for each application). I added the user to
> the IIS_WPG group, set NTFS permissions on the file system, enables the
Perl
> CGI IIS exension, and added "adjust memory quotas for a process" and
> "replace a process level token" to the user in the local security policy.
>
> If I run as the user in a command shell, it works.
> If I request a static page in the application's virtual-directory, it
works
> If I activate ASP and run an ASP script in the application's virtual
> directory, it works
> If I change the application pool's user to Network Service or the IWAM_
> account, and run a Perl CGI script, it works
>
> But running the same script in the same app-pool as my user, I get a 403
> error.
>
> I am at wits end and would greatly appreciate any pointers.
>
> Issac
>
>
>
>

Issac
Mon May 10 05:07:51 CDT 2004

I got it - the user wasn't fully qulaified (eg, USER instead of
COMPUTER\USER). It's very strange, as there WAS a w3wp process running for
the user - maybe some later-stage audit inside IIS was wanting the fully
qulaified username?

Scripts now excecute - however, I don't seem to be getting the environment
variables I set for that user. When I run a command shell as the user they
DO get set. Is there any way I can somehow set environment variables for
the application pool?

Thanks!
Issac

"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:ujytYjjNEHA.1916@TK2MSFTNGP11.phx.gbl...
> Check in the Web Server's log file for the specific 403 error that you
got.
> It's probably 403 sub-status 18.
>
> Make sure to restart IIS AFTER you change the user privileges and IIS_WPG
> membership. Recycling app pool or restarting website is not enough.
>
> Otherwise, the instructions look good and should work. I just tried it
out
> with Perl and it worked for me.
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //
> "Issac Goldstand" <isaac@cpan.org> wrote in message
> news:uKFha9gNEHA.3452@TK2MSFTNGP10.phx.gbl...
> I'm trying to set up an Application Pool for use with a Perl CGI
application
> on IIS 6.0. I am using a custom user (among other reasons, I need to set
up
> different environment settings for each application). I added the user to
> the IIS_WPG group, set NTFS permissions on the file system, enables the
Perl
> CGI IIS exension, and added "adjust memory quotas for a process" and
> "replace a process level token" to the user in the local security policy.
>
> If I run as the user in a command shell, it works.
> If I request a static page in the application's virtual-directory, it
works
> If I activate ASP and run an ASP script in the application's virtual
> directory, it works
> If I change the application pool's user to Network Service or the IWAM_
> account, and run a Perl CGI script, it works
>
> But running the same script in the same app-pool as my user, I get a 403
> error.
>
> I am at wits end and would greatly appreciate any pointers.
>
> Issac
>
>
>
>