Edit report at http://bugs.php.net/bug.php?id=27051&edit=1
ID: 27051
Comment by: heer2351 at zonnet dot nl
Reported by: ghoffer at globalscape dot com
Summary: Impersonation with FastCGI does not EXEC process as
impersonated user
Status: Closed
Type: Bug
Package: CGI related
Operating System: Windows
PHP Version: 5.3
Assigned To: pajoye
New Comment:
Thanks for your fast response.
I am running the website using an application pool and have configured a
special user for that pool. I use the same user for anonymous access. So
both the website as well as PHP use the same identity. This user has all
the required rights.
Just to test I have given this user rights to %COMSPEC% using cacls.
Same error.
Gave IUSR_xxx rights, same error.
Gave IWAM_xxx rights, same error.
Please check what has changed between 5.2.13 and 5.3.2
Previous Comments:
------------------------------------------------------------------------
[2010-03-24 22:14:23] [email protected]
Let me copy my note here as well:
Quick note here. It is necessary to give a given IUSR_* the permission
to use cmd.exe (%COMSPEC%). It is recommended not to do it as it may
introduce security issues, obviously. But if you really want to do it,
use:
cacls %COMSPEC% /E /G IUSR_xxxx:R
------------------------------------------------------------------------
[2010-03-24 22:09:25] [email protected]
you have >to give< the permission
------------------------------------------------------------------------
[2010-03-24 22:08:58] [email protected]
It works just fine and you have the permission to the IIS user to
execute the shell. See the other reports about that, I added the
explanation and how to configure it correctly there.
------------------------------------------------------------------------
[2010-03-24 21:43:39] heer2351 at zonnet dot nl
PHP 5.3.2 (cgi-fcgi) (built: Mar 3 2010 20:47:00)
FastCGI DLL Version 7.5.7693.0
Microsoft Windows Server 2003R2
IIS6
Exact same problem - PHP Warning: exec(): Unable to fork
Changed PHP back to:
PHP 5.2.13 (cgi-fcgi) (built: Feb 24 2010 14:37:42)
No fork problem, so it is not a configuration problem.
------------------------------------------------------------------------
[2010-02-10 01:00:00] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/bug.php?id=27051
--
Edit this bug report at http://bugs.php.net/bug.php?id=27051&edit=1
