Security Settings for ASP.NET Applications
| October 2005 | |
|
Abstract
This article discusses Windows security settings that need to be made when using the DFC Primary Interop Assembly (PIA) within an ASP.NET application.
Windows 2000, IIS 5
Modification to dmcl.ini
- Open your dmcl.ini
- The following 'local_path' entry needs to be added to your dmcl.ini file in the [DMAPI_CONFIGURATION] section, (you may need to create this section if it does not already exist).
[DMAPI_CONFIGURATION]
local_path = C:\Documentum\ASP
|
- You can specify any folder in the above entry. If the folder does not exist create it.
- Give the ASPNET user full access to the folder referenced by the 'local_path' entry
Modification of the dfc.properties
- Locate your dfc.properties. This file is typically in C:\Documentum\config
- Add the following lines to your dfc.properties file, you can specify the folders of your choosing.
dfc.data.dir=C:/Documentum/asp
dfc.user.dir=C:/Documentum/asp
dfc.checkout.dir=C:/Documentum/asp/checkout
dfc.export.dir=C:/Documentum/asp/export
dfc.registry.mode=file
dfc.registry.file=C:/Documentum/asp/documentum.ini
|
- Give the ASPNET user full access to all the folders referenced above.
Access to dmcl40.dll and dfc.dll
Give the ASPNET user 'Read and Execute' permissions to dmcl40.dll and dfc.dll. These files are typically present in the c:\Program Files\Documentum\Shared folder
Windows 2003,IIS 6
Follow the same procedure as above. Instead of the ASPNET user as mentioned above, give access to the Network Service account. The ASPNET user does not exist on Windows 2003 systems.
Impersonate Identity
If you do not want to give permissions to the ASPNET or the Network Service account you can create a new user (or use an existing one) and give that user access to the files and folders mentioned above. Then add the following line in the web.config file of your web application assuming 'MY_USER' and 'MY_USER_PASSWORD' are the username and password respectively -
<identity impersonate="true" userName="MY_USER" password="MY_USER_PASSWORD"></identity>
|
Acknowledgements
Please refer to the post "Another ComJavaHelper Exception" on the support forums by Andy Anglin for more details of running DFC PIA ASP.NET applications on Windows 2003 Server.
|