Virtual Directory mapped to Unix share in IIS 5.0

We are trying to map a Virtual Directory in IIS 5 on a Windows 2000 SP4
server to a share on a Unix server running Solaris. Every time the IIS Admin
service is restarted, the following error appears in the System event log on
the IIS server:

Event ID 101 W3SVC
The server was unable to add the virtual root '/online' for the directory
'\\SOLOMON\EDRIVE\online' due to the following error: The network request is
not supported.

Solomon is the name of the Unix server and Edrive is the name of the share.
I can browse without issue to this path in Windows by typing
\\SOLOMON\EDRIVE\online from the Run command line and it opens the contents
of the folder in a window. So Windows can see this share without issue from
outside IIS apparently.

When I expand the Virtual Directory in IIS for "online" I can see the
directory contents so it is connecting in a sense, but the error is still
appearing in the Event log AND there is a red error icon for the Virtual
Directory "online" in IIS.

Here is how I have the Virtual Directory configured. If further information
is required from other tabs, please let me know:

Virtual Directory tab
- A share located on another computer
- Network Directory: \\SOLOMON\EDRIVE\online
- Connect As is set to our domain administrator account
- Read, Log visits, Index this resource checked
- No application name is set
- Execute Permissions: Scripts Only

Directory Security tab
- Authentication methods are Anonymous access set to local IUSR account and
Integrated Windows authentication.

I am not sure if this is a configuration issue with IIS or with the Unix
system. I thought I'd check here first. Thank you for any assistance and
suggestions in advance.

Re: Virtual Directory mapped to Unix share in IIS 5.0

On Aug 14, 12:24 pm, Andrea wrote:
> We are trying to map a Virtual Directory in IIS 5 on a Windows 2000 SP4
> server to a share on a Unix server running Solaris. Every time the IIS Admin
> service is restarted, the following error appears in the System event log on
> the IIS server:
>
> Event ID 101 W3SVC
> The server was unable to add the virtual root '/online' for the directory
> '\\SOLOMON\EDRIVE\online' due to the following error: The network request is
> not supported.
>
> Solomon is the name of the Unix server and Edrive is the name of the share.
> I can browse without issue to this path in Windows by typing
> \\SOLOMON\EDRIVE\online from the Run command line and it opens the contents
> of the folder in a window. So Windows can see this share without issue from
> outside IIS apparently.
>
> When I expand the Virtual Directory in IIS for "online" I can see the
> directory contents so it is connecting in a sense, but the error is still
> appearing in the Event log AND there is a red error icon for the Virtual
> Directory "online" in IIS.
>
> Here is how I have the Virtual Directory configured. If further information
> is required from other tabs, please let me know:
>
> Virtual Directory tab
> - A share located on another computer
> - Network Directory: \\SOLOMON\EDRIVE\online
> - Connect As is set to our domain administrator account
> - Read, Log visits, Index this resource checked
> - No application name is set
> - Execute Permissions: Scripts Only
>
> Directory Security tab
> - Authentication methods are Anonymous access set to local IUSR account and
> Integrated Windows authentication.
>
> I am not sure if this is a configuration issue with IIS or with the Unix
> system. I thought I'd check here first. Thank you for any assistance and
> suggestions in advance.


The user account used to access the network share is different between
your interactive Windows login and what IIS uses to access the network
share.

Please read this URL and any related links that apply to IIS5 first:
http://www.microsoft.com/technet/prodtechnol/windowsserver20 03/technologies/webapp/iis/remstorg.mspx


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

Re: Virtual Directory mapped to Unix share in IIS 5.0

I need a bit more clarification on this point, please. We are using the
domain administrator account under Connect As for the Virtual Directory. We
only have a single domain and the Solaris server and the Windows 2000 IIS
server are on the same domain.

Should we be using a different method for authentication such as Basic
authentication? Should I be assigning a different user account under Connect
As?

Thanks,
Andrea

"David Wang" wrote:

> On Aug 14, 12:24 pm, Andrea wrote:
> > We are trying to map a Virtual Directory in IIS 5 on a Windows 2000 SP4
> > server to a share on a Unix server running Solaris. Every time the IIS Admin
> > service is restarted, the following error appears in the System event log on
> > the IIS server:
> >
> > Event ID 101 W3SVC
> > The server was unable to add the virtual root '/online' for the directory
> > '\\SOLOMON\EDRIVE\online' due to the following error: The network request is
> > not supported.
> >
> > Solomon is the name of the Unix server and Edrive is the name of the share.
> > I can browse without issue to this path in Windows by typing
> > \\SOLOMON\EDRIVE\online from the Run command line and it opens the contents
> > of the folder in a window. So Windows can see this share without issue from
> > outside IIS apparently.
> >
> > When I expand the Virtual Directory in IIS for "online" I can see the
> > directory contents so it is connecting in a sense, but the error is still
> > appearing in the Event log AND there is a red error icon for the Virtual
> > Directory "online" in IIS.
> >
> > Here is how I have the Virtual Directory configured. If further information
> > is required from other tabs, please let me know:
> >
> > Virtual Directory tab
> > - A share located on another computer
> > - Network Directory: \\SOLOMON\EDRIVE\online
> > - Connect As is set to our domain administrator account
> > - Read, Log visits, Index this resource checked
> > - No application name is set
> > - Execute Permissions: Scripts Only
> >
> > Directory Security tab
> > - Authentication methods are Anonymous access set to local IUSR account and
> > Integrated Windows authentication.
> >
> > I am not sure if this is a configuration issue with IIS or with the Unix
> > system. I thought I'd check here first. Thank you for any assistance and
> > suggestions in advance.
>
>
> The user account used to access the network share is different between
> your interactive Windows login and what IIS uses to access the network
> share.
>
> Please read this URL and any related links that apply to IIS5 first:
> http://www.microsoft.com/technet/prodtechnol/windowsserver20 03/technologies/webapp/iis/remstorg.mspx
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //
>
>

Re: Virtual Directory mapped to Unix share in IIS 5.0

It all depends on what you want to do. Your question about "different
authentication method" or "different user account" all depend on what
you want to do -- because those configurations accomplish very
different things.

Is there anything unclear with the URL, because it attempts to address
the usual questions.

Do you want pass-thru authentication? What user account is required
for access depends on your security requirements. You may want to
create a UNC share of \\SOLOMON\Online on Solomon which points to
the right content, instead of just sharing the root.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//



On Aug 14, 2:26 pm, Andrea wrote:
> I need a bit more clarification on this point, please. We are using the
> domain administrator account under Connect As for the Virtual Directory. We
> only have a single domain and the Solaris server and the Windows 2000 IIS
> server are on the same domain.
>
> Should we be using a different method for authentication such as Basic
> authentication? Should I be assigning a different user account under Connect
> As?
>
> Thanks,
> Andrea
>
>
>
> "David Wang" wrote:
> > On Aug 14, 12:24 pm, Andrea wrote:
> > > We are trying to map a Virtual Directory in IIS 5 on a Windows 2000 SP4
> > > server to a share on a Unix server running Solaris. Every time the IIS Admin
> > > service is restarted, the following error appears in the System event log on
> > > the IIS server:
>
> > > Event ID 101 W3SVC
> > > The server was unable to add the virtual root '/online' for the directory
> > > '\\SOLOMON\EDRIVE\online' due to the following error: The network request is
> > > not supported.
>
> > > Solomon is the name of the Unix server and Edrive is the name of the share.
> > > I can browse without issue to this path in Windows by typing
> > > \\SOLOMON\EDRIVE\online from the Run command line and it opens the contents
> > > of the folder in a window. So Windows can see this share without issue from
> > > outside IIS apparently.
>
> > > When I expand the Virtual Directory in IIS for "online" I can see the
> > > directory contents so it is connecting in a sense, but the error is still
> > > appearing in the Event log AND there is a red error icon for the Virtual
> > > Directory "online" in IIS.
>
> > > Here is how I have the Virtual Directory configured. If further information
> > > is required from other tabs, please let me know:
>
> > > Virtual Directory tab
> > > - A share located on another computer
> > > - Network Directory: \\SOLOMON\EDRIVE\online
> > > - Connect As is set to our domain administrator account
> > > - Read, Log visits, Index this resource checked
> > > - No application name is set
> > > - Execute Permissions: Scripts Only
>
> > > Directory Security tab
> > > - Authentication methods are Anonymous access set to local IUSR account and
> > > Integrated Windows authentication.
>
> > > I am not sure if this is a configuration issue with IIS or with the Unix
> > > system. I thought I'd check here first. Thank you for any assistance and
> > > suggestions in advance.
>
> > The user account used to access the network share is different between
> > your interactive Windows login and what IIS uses to access the network
> > share.
>
> > Please read this URL and any related links that apply to IIS5 first:
> >http://www.microsoft.com/technet/prodtechnol/windowsserver2 003/techno...
>
> > //David
> >http://w3-4u.blogspot.com
> >http://blogs.msdn.com/David.Wang
> > //- Hide quoted text -
>
> - Show quoted text -

Re: Virtual Directory mapped to Unix share in IIS 5.0

I went ahead and created a share for \\SOLOMON\Online so now we're using that
instead. Still same error message from W3SVC. The thing that is strange
from this message is that it says "network request not supported" which makes
me wonder if we're trying to use an authentication method that isn't going to
work across Windows to Unix.

Since this is an internal web site and traffic between the IIS server and
Unix server is just local, perhaps we should try something like Basic
Authentication. What do you think?

Also, is it necessary to specify a user account in the Connect As section
for the Virtual Directory? If we can cut out a few variables and simplify
the connection process that would be good. We don't need any fancy
authentication method to get from Windows to Unix since it's all on our LAN.

Can you offer some suggestions on how I can simplify the connection process?

I did read that article but it was for IIS 6 and we're using IIS 5. And
they don't really discuss how to setup a virtual directory connection between
Windows and Unix in the most simple manner possible.

Thanks for your help! :-)

"David Wang" wrote:

> It all depends on what you want to do. Your question about "different
> authentication method" or "different user account" all depend on what
> you want to do -- because those configurations accomplish very
> different things.
>
> Is there anything unclear with the URL, because it attempts to address
> the usual questions.
>
> Do you want pass-thru authentication? What user account is required
> for access depends on your security requirements. You may want to
> create a UNC share of \\SOLOMON\Online on Solomon which points to
> the right content, instead of just sharing the root.
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //
>
>
>
> On Aug 14, 2:26 pm, Andrea wrote:
> > I need a bit more clarification on this point, please. We are using the
> > domain administrator account under Connect As for the Virtual Directory. We
> > only have a single domain and the Solaris server and the Windows 2000 IIS
> > server are on the same domain.
> >
> > Should we be using a different method for authentication such as Basic
> > authentication? Should I be assigning a different user account under Connect
> > As?
> >
> > Thanks,
> > Andrea
> >
> >
> >
> > "David Wang" wrote:
> > > On Aug 14, 12:24 pm, Andrea wrote:
> > > > We are trying to map a Virtual Directory in IIS 5 on a Windows 2000 SP4
> > > > server to a share on a Unix server running Solaris. Every time the IIS Admin
> > > > service is restarted, the following error appears in the System event log on
> > > > the IIS server:
> >
> > > > Event ID 101 W3SVC
> > > > The server was unable to add the virtual root '/online' for the directory
> > > > '\\SOLOMON\EDRIVE\online' due to the following error: The network request is
> > > > not supported.
> >
> > > > Solomon is the name of the Unix server and Edrive is the name of the share.
> > > > I can browse without issue to this path in Windows by typing
> > > > \\SOLOMON\EDRIVE\online from the Run command line and it opens the contents
> > > > of the folder in a window. So Windows can see this share without issue from
> > > > outside IIS apparently.
> >
> > > > When I expand the Virtual Directory in IIS for "online" I can see the
> > > > directory contents so it is connecting in a sense, but the error is still
> > > > appearing in the Event log AND there is a red error icon for the Virtual
> > > > Directory "online" in IIS.
> >
> > > > Here is how I have the Virtual Directory configured. If further information
> > > > is required from other tabs, please let me know:
> >
> > > > Virtual Directory tab
> > > > - A share located on another computer
> > > > - Network Directory: \\SOLOMON\EDRIVE\online
> > > > - Connect As is set to our domain administrator account
> > > > - Read, Log visits, Index this resource checked
> > > > - No application name is set
> > > > - Execute Permissions: Scripts Only
> >
> > > > Directory Security tab
> > > > - Authentication methods are Anonymous access set to local IUSR account and
> > > > Integrated Windows authentication.
> >
> > > > I am not sure if this is a configuration issue with IIS or with the Unix
> > > > system. I thought I'd check here first. Thank you for any assistance and
> > > > suggestions in advance.
> >
> > > The user account used to access the network share is different between
> > > your interactive Windows login and what IIS uses to access the network
> > > share.
> >
> > > Please read this URL and any related links that apply to IIS5 first:
> > >http://www.microsoft.com/technet/prodtechnol/windowsserver2 003/techno...
> >
> > > //David
> > >http://w3-4u.blogspot.com
> > >http://blogs.msdn.com/David.Wang
> > > //- Hide quoted text -
> >
> > - Show quoted text -
>
>
>

Re: Virtual Directory mapped to Unix share in IIS 5.0

Hi Andrea.

Don't know if you're still having this problem, but I had something
similar today so here are my suggestions.

> Since this is an internal web site and traffic between the IIS server andUnixserver is just local, perhaps we should try something like Basic
> Authentication. What do you think?

Basic Authentication is between the client web browser and the IIS
server. It does not affect the authentication used between the IIS
server and the Unix server, so it won't help.

> Also, is it necessary to specify a user account in the Connect As section
> for theVirtualDirectory?

Yes. You need to give IIS credentials it can use to connect to the
share.

You could try adding a local user to the IIS server with the same
username and password as a user on the Unix box that has access to
your Samba share. Then in IIS for the "Connect As" user, you can just
enter the username for the local user (rather than entering domain
\user).

For example, if you had a user on the Unix box called "online_user"
with access to the share. Add a user called "online_user" to the IIS
server with the same password as the Samba password that user has on
Unix. In "Connect As" enter "online_user".

This worked for me, so it might be worth a try.

Scott

Re: Virtual Directory mapped to Unix share in IIS 5.0

Hi Scott,

Thanks for the reply. I have not found a solution yet. What I've done is
setup a local account with Administrator rights on the IIS server. This
account has the same username/password as the account on Unix that has
permission to the /online share. When I use this local Windows account under
the Virtual Directory Connect As..., I get the following error in the event
log when I restart the IISAdmin service:

The server was unable to add the virtual root '/online' for the directory
'\\SOLOMON\online' due to the following error: Logon failure: unknown user
name or bad password.

This is Event ID 101 from the W3SVC service.

This is different from the error we were getting before which said "Network
request not supported." So maybe we're making progress?

I did double check the spelling of both user accounts and passwords for
Windows and Unix and they are exactly the same in both places.

Why would this error be generated?

Also, we are using PC Netlink for the Unix shares, not Samba.

Thanks,
Andrea

"ScottB" wrote:

> Hi Andrea.
>
> Don't know if you're still having this problem, but I had something
> similar today so here are my suggestions.
>
> > Since this is an internal web site and traffic between the IIS server andUnixserver is just local, perhaps we should try something like Basic
> > Authentication. What do you think?
>
> Basic Authentication is between the client web browser and the IIS
> server. It does not affect the authentication used between the IIS
> server and the Unix server, so it won't help.
>
> > Also, is it necessary to specify a user account in the Connect As section
> > for theVirtualDirectory?
>
> Yes. You need to give IIS credentials it can use to connect to the
> share.
>
> You could try adding a local user to the IIS server with the same
> username and password as a user on the Unix box that has access to
> your Samba share. Then in IIS for the "Connect As" user, you can just
> enter the username for the local user (rather than entering domain
> \user).
>
> For example, if you had a user on the Unix box called "online_user"
> with access to the share. Add a user called "online_user" to the IIS
> server with the same password as the Samba password that user has on
> Unix. In "Connect As" enter "online_user".
>
> This worked for me, so it might be worth a try.
>
> Scott
>
>