[isalist] Re: Enterprise scripting question

  • From: "Thor (Hammer of God)" <thor@xxxxxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 25 Apr 2006 16:47:26 -0700

http://www.ISAserver.org
-------------------------------------------------------
  
Ewe.  Didn't know you had to run the Full Monty just to add destination
sites.  Will we be seeing delegation of process in future releases?  Or are
scripts/automation processes destined to be run with stored creds somewhere?

t


On 4/25/06 4:28 PM, "Jim Harrison" <Jim@xxxxxxxxxxxx> spoketh to all:

> http://www.ISAserver.org
> -------------------------------------------------------
> 
> Whatever account you use, it should be either an Enterprise or Array admin,
> depending on what context you're operating in.  I wouldn't want to run the web
> app in a user context unless you unequivocally trust your own coding skills.
> If you answered "yes, I do..", then remind me to never hire you... :-p
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> Behalf Of Thor (Hammer of God)
> Sent: Tuesday, April 25, 2006 15:11
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Enterprise scripting question
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> You could also run the web app underneath the creds of a user that has
> permissions to do that, though I couldn't find anywhere exactly what rights
> had to be given to the account.  You obviously wouldn't want to do that under
> an account that had escalated privileges (only was specifically granted the
> rights for that process.)
> 
> t
> 
> 
> On 4/25/06 2:20 PM, "Jim Harrison" <Jim@xxxxxxxxxxxx> spoketh to all:
> 
>> http://www.ISAserver.org
>> -------------------------------------------------------
>> 
>> You have to pass the credentials in the
>> connectotoconfigurationstorageserver
>> method when you run in an ASP page because the ASP process operates
>> under the network services account, which has no rights in CSS.
>> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/isasd
>> k/isa/fp c_connecttoconfigurationstorageserver.asp
>> Spells it out in gory detail.
>> 
>> ..of course, this means you have to stash those credentials somewhere
>> ASP can find them, BUT NOT IN PLAIN TEXT anywhere.
>> 
>> -------------------------------------------------------
>>    Jim Harrison
>>    MCP(NT4, W2K), A+, Network+, PCG
>>    http://isaserver.org/Jim_Harrison/
>>    http://isatools.org
>>    Read the help / books / articles!
>> -------------------------------------------------------
>>  
>> 
>> -----Original Message-----
>> From: isalist-bounce@xxxxxxxxxxxxx
>> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Periyasamy, Raj
>> Sent: Tuesday, April 25, 2006 14:11
>> To: isalist@xxxxxxxxxxxxx
>> Subject: [isalist] Enterprise scripting question
>> 
>> http://www.ISAserver.org
>> -------------------------------------------------------
>>   
>> Hi all,
>> I am trying to create a web based interface, just for adding domains
>> to a Domain Name Set. The script itself runs fine if I run it from the
>> command prompt. However, when I try to embed the code in an ASP page,
>> the script fails while trying to do ConnectToConfigurationStorageServer.
>> 
>> The following is the extract of the code from the ASP page:
>> 
>> Set root = CreateObject("FPC.Root")
>>     root.ConnectToConfigurationStorageServer cssComputer
>>     Set oIsaArray = root.Arrays.Item("INFINEUM")
>>     Set oDomainNameSet =
>> oIsaArray.RuleElements.DomainNameSets.Item(sDomainNameSetName)
>>     oDomainNameSet.Add(sDomainToAdd)
>>     If Err.Number = -2147024713 Then
>>         response.write "Error: Domain " + sDomainToAdd + " is already
>> unblocked."
>>     Else
>>         oDomainNameSet.Save
>> response.write "Success: Domain " + sDomainToAdd + " is now unblocked."
>>     End If
>>     root.disConnectFromConfigurationStorageServer
>> 
>> 
>> The following is the error message I get when accessing the URL,
>> 
>> Error Type:
>> FPC.Root.1 (0x80070002)
>> The system cannot find the file specified.
>> /prx_urlexcept.asp, line 38
>> 
>> 
>> 
>> Line 38 happens to be "oFPC.ConnectToConfigurationStorageServer
>> cssComputer"
>> 
>> Would appreciate any inputs.
>> 
>> Thanks.
>> 
>> 
>> Regards,
>> Raj Periyasamy
>> MCSE(Messaging), CCNA
>> 
>> ------------------------------------------------------
>> List Archives: //www.freelists.org/archives/isalist/
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server Articles and Tutorials:
>> http://www.isaserver.org/articles_tutorials/
>> ISA Server Blogs: http://blogs.isaserver.org/
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>> Report abuse to listadmin@xxxxxxxxxxxxx
>> 
>> 
>> All mail to and from this domain is GFI-scanned.
>> 
>> ------------------------------------------------------
>> List Archives: //www.freelists.org/archives/isalist/
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server Articles and Tutorials:
>> http://www.isaserver.org/articles_tutorials/
>> ISA Server Blogs: http://blogs.isaserver.org/
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>> Report abuse to listadmin@xxxxxxxxxxxxx
>> 
>> 
>> 
> 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> All mail to and from this domain is GFI-scanned.
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: