Service pack information

Back to the top

• Disable impersonation for the whole ASP.NET Web application. This is the default setting.
• Disable impersonation only for the particular .aspx page that does the Index Server search. To do this, add a <location> tag to the Web.config file as follows:

  <location path="filename.aspx">
  <system.web>
     <identity impersonate="false" />
  </system.web>
  </location>
  					

Back to the top

Steps to Reproduce the Behavior

1. Start Microsoft Visual Studio .NET.
2. Create an ASP.NET Web application.
3. Add the following code in the HTML of an .aspx page:

   <%@ Page language="c#" %>
   <%
               System.Data.OleDb.OleDbConnection conn = new System.Data.OleDb.OleDbConnection("provider=msidxs;");
   
               conn.Open();
   
               string Sql = "Select DocTitle, vpath, characterization, rank from Scope(' DEEP TRAVERSAL OF \"C:\\\" ')  where FREETEXT(' \"ticket\" ') order by rank desc";
   
               System.Data.OleDb.OleDbDataAdapter da = new System.Data.OleDb.OleDbDataAdapter(Sql, conn);
   
               System.Data.DataSet ds = new System.Data.DataSet();
   
               da.Fill(ds, "SearchResults");
               Response.Write("Search Results: <br>");
               for (int i = 0; i < ds.Tables[0].Rows.Count; i++)
   
               {
   
                           Response.Write("<br>" + ds.Tables[0].Rows[i]["vpath"].ToString());
   
               }
   
   %>
   					

4. Modify the Web.config file to enable impersonation as follows:

   <identity impersonate="true" />
   					

5. Make sure that the security context under which the Aspnet_wp.exe worker process runs is the ASPNET account. To do this, set the userName attribute to machine, and then set the Password attribute to autogenerate in the <processModel> section of the Machine.config file.
   
   Note By default, the ASP.NET worker process is set to run under the security context of the restricted ASPNET account.
6. Start the Indexing Service on your computer.
7. Build the application, and then open the .aspx page in your browser. Notice that you receive the error message that is listed in the "Symptoms" section.

Back to the top