Web Connection
Question about the BLD PRG
Gravatar is a globally recognized avatar based on your email address. Question about the BLD PRG
  Richard Kaye
  All
  Jan 8, 2020 @ 01:10pm

In the BLD program, there is the following line:

DCOM_UserId  =	"Interactive User"

Run the BLD prg and you get this in the registered DCOM object:

According to other bits of the documentation I've read, it's recommended to set the security context of the DCOM object to the launching user, which then allows the security context to be determined by the IIS application pool. However, if I change the variable assignment to use "Launching User" instead of "Interactive User", it gets interpreted as a specific user name and I end up with something that looks like this:

So the question becomes, is there a way to assign a value to DCOM_UserID which results in the context getting set to the launching user option or do I just need to manually adjust each time I build?

TIA

Gravatar is a globally recognized avatar based on your email address. re: Question about the BLD PRG
  Rick Strahl
  Richard Kaye
  Jan 8, 2020 @ 05:32pm

Launching user is an empty string (ie. no specific DCOM Impersonation). If you specify any name, that name is used and Launching User is not a user just a state.

+++ Rick ---

Gravatar is a globally recognized avatar based on your email address. re: Question about the BLD PRG
  Richard Kaye
  Rick Strahl
  Jan 9, 2020 @ 05:51am

Setting DCOM_UserID to a null string worked. Thanks!

Gravatar is a globally recognized avatar based on your email address. re: Question about the BLD PRG
  Rick Strahl
  Richard Kaye
  Jan 9, 2020 @ 12:59pm

Please understand that BLD_YourApp.prg is used on your dev setup, so what you set here has no effect on what you get on the server. The DCOM configuration is machine specific and doesn't travel with the COM server.

The reason the default is Interactive User on the local desktop is that it's nice to be able to see the servers running during dev and gives an opportunity to look at logs, config, open the editor etc.

For production I recommend always using Launching User (ie. don't set DCOM on the Fox server) and then using the impersonation that is set on the Web Server Application Pool.

+++ Rick ---

Gravatar is a globally recognized avatar based on your email address. re: Question about the BLD PRG
  Richard Kaye
  Rick Strahl
  Jan 9, 2020 @ 01:13pm

Thanks, Rick. I've got a reasonable grip on this now.

© 1996-2020