IIS7/Server 2008 Permissions Issues

[James636]

Running Photopost VB 2.3 on VBulletin 3.6.8 and running into an error.

Replaced servers and migrated all databases and data over to the new machine (Windows Server 2008/IIS7/PHP 5.2.5 (x64) FastCGI, and MySQL 5.0.51a X64) and now all uploaded images are not applying permissions correctly.

Folder permissions are set properly for IIS Guest, however the img file itself does apply this permission to the uploaded files, however the thumbnails are applying fine.

Any ideas?

[James636]

anybody??, at least any insight would be awesome.

[Chuck S]

well vbgallery with 3.68 should be version 2.42 not 2.3

[James636]

Originally Posted by Chuck S

well vbgallery with 3.68 should be version 2.42 not 2.3

Alright just upgraded to 2.42, so far no improvement.

[Zachariah]

Hello,
There are a few things I would look at since the servers may have different settings.

1)
On the Windows Server:
* Does it use Image Magick or GD2 for Image possessing ?

AdminCP => vBGallery => Modify Settings
- Uploading Options
-- Resize Program
-- Resize Program Path **

** If you are using Image Magick
EX: c:\Imagemagick\

--------------------------------------------
2)
AdminCP => vBGallery => Modify Settings
- Title, URL's, & Paths

Make sure all URLs and PATHs reflect the new location of your files. Not "all" of the time but "most" of the time server to server transfers change the location PATH of where the files are stored.

EX:
Server1: /www/gallery/files
Server2: /www/client225/mydomain.com/gallery/files

[James636]

Originally Posted by Zachariah

Hello,
There are a few things I would look at since the servers may have different settings.

1)
On the Windows Server:
* Does it use Image Magick or GD2 for Image possessing ?

AdminCP => vBGallery => Modify Settings
- Uploading Options
-- Resize Program
-- Resize Program Path **

** If you are using Image Magick
EX: c:\Imagemagick\

--------------------------------------------
2)
AdminCP => vBGallery => Modify Settings
- Title, URL's, & Paths

Make sure all URLs and PATHs reflect the new location of your files. Not "all" of the time but "most" of the time server to server transfers change the location PATH of where the files are stored.

EX:
Server1: /www/gallery/files
Server2: /www/client225/mydomain.com/gallery/files

Thanks Zac,

I checked the following and everything is setup properly. I have both GD2 and Imagemagick available and I switched between both without any change. Both will allow the file to upload properly, however the IUSR_SERVERNAME NTFS security setting is not applying to the upload, so I get an ACL error trying to load it.

My guess is something with how the Windows server is handling the upload itself, and not applying security properly.

The paths are all correct as I configured the server (dedicated) with the same directory paths as the old one.

To provide an example, here is one.

http://www.r3vlimited.com/gallery/fi..._1280x1024.jpg

Uploaded file, blocked via ACL because the server is not assigning the IUSR_SERVERNAME permission, however the resized thumbnail image works fine.

http://www.r3vlimited.com/gallery/sh...p?i=11096&c=10

Can I set a global setting to resize ALL incoming pictures no matter what size they are? That may correct the issue as it appears the resizer is working properly. Not a real fix, but a workaround as my users want the gallery working again.

[Zachariah]

I do not have experance on IIS7 yet, but I did some google searching on "Windows Server 2008 IIS7 file permissions"

This looks intresting.
http://blogs.iis.net/bills/archive/2...rmissions.aspx

-- still looking.

[James636]

Originally Posted by Zachariah

I do not have experance on IIS7 yet, but I did some google searching on "Windows Server 2008 IIS7 file permissions"

This looks intresting.
http://blogs.iis.net/bills/archive/2...rmissions.aspx

-- still looking.

Zac, thanks for the link. I was just about to investigate bypassing NTFS security with URLAuthorization when I found another great post on the IIS7 boards.

With my stock PHP.INI for FastCGI, I did not have an upload temp directory defined, so it was defaulting to a system32/temp folder (which is secure)

By creating another temp folder (in my case C:\WEB\PHPTEMP) and allowing full network and IUSR_SERVERNAME Change/Read permissions I was able to restore functionality and now NTFS permissions are working properly.

Thank you for the help, you did guide me into looking into it a little deeper.