Sunday, May 6, 2007

Access Denied - SAV Reporting

Trying to use the new reporting tool in 10.1 of SAV

It uses Internet Information Services (IIS). Trying to access the front page from Symantec System Console (SSC) gives

HTTP error 404; Forbidden Access Denied

From the IIS log

2007-05-07 00:01:52 W3SVC1 10.130.248.10 POST /Reporting/admin/upload.php - 80 - 10.130.248.10 libwww-perl/5.803 403 19 1314

SAV support had me add the NETWORK SERVICES group to

the resgistry on the server

Computer Configuration>Windows Settings>Security Settings>Local Polices>User Rights Assignment>

"Adjust Memory process quota for a processs" and "Replace a process level token"

I checked in the Web Server Extensions of IIS

The SAV install procedure has added a path to the the php-cgi.exe

I added one for php5isapi.dll no good

I added IUSR_Server user to gave the above two rights no good

The problem was fixed by giving the network service security group read,read/execute permissions to the symantec folder. I probably would have got away with just adding it at the reporting folder level. Of the things I tried prior the only one that needs to be actioned is adding the same group to the two registry entries.

No comments: