Connect from a Win2008 Server IIS to samba share

iis-7

I have a problem as I want to use a Samba NAS device as storage for my websites in IIS 7.0, they are all ASP.net websites. Surfing to them gives me a 401.2 error -> permissions problem

The bottomline is; I need to connect from a Win2008 Server's IIS to a samba share…

Error Summary

HTTP Error 401.2 – Unauthorized
You are not authorized to view this page due to invalid authentication headers.
Detailed Error Information
Module IIS Web Core
Notification AuthenticateRequest
Handler StaticFile
Error Code 0x80070005
Requested URL http://eva:80/Eccentric2009
Physical Path \192.168.0.40\Volume_1\DEVELOPMENT\WEBAPPS\Ecceff2009
Logon Method Not yet determined
Logon User Not yet determined
Failed Request Tracing Log Directory C:\inetpub\logs\FailedReqLogFiles

I only have a webinterface to configure my NAS device. This allows me to create (unix) users and groups. The users must have a password at creation.
I guess it executes the 'adduser' command. It's all I can do. The NAS is not approachable via SSH or telnet.

Now, in IIS, when I try to access this device, it tries to access the NAS via COMPUTERNAME \IUSR and its password. The problem is the 'COMPUTERNAME\' (I guess!). In windows, I need to log in to this samba share with only username & password. -> Without computername ! In the IIS manager on the server I cannot find the option to log in with this credentials.

I read something about the option "authenticate as guest when computer information is available" but I'm not sure that's what I need.

FYI, the NAS is a conceptronic CH3NAS device, I'm running Win2008 R2.

Thanks a lot in advance !

Best Answer

The problem your seeing is addressed on the NAS' FAQ page under "How to solve security problems with drive mappings, under Windows Vista?"

First, follow the instructions on the FAQ page, they should also apply to Win2k8:

The security policies which are being used by Windows Vista are not supported by the Samba software in the 'network storage device'. Therefore, to use file shares/folders of your 'network storage device', you need to change this the security policies of Windows Vista.

  1. Map a network drive to the NAS on your IIS server and connect as "Guest".
  2. Point your website's Local Path to that network drive.
  3. You'll have to grant the IUSR_ account access to the share on the Win2k8 box, but it won't matter that IUSR_ doesn't exist on the NAS, since the drive was mapped with "Guest".

You might have to change the security of "Guest" on the NAS.

Related Topic