具有ACL和静态内容的IIS 8 401.3 [英] IIS 8 401.3 with ACL and static content

问题描述

我在IIS和ACL方面遇到问题.

I'm having a problem with IIS and ACL's.

我已经在专用的AppPool下配置了MVC应用程序.该应用程序池在ApplicationPoolIdentity(在我的情况下为用户IIS AppPool \ accountinfo.local =与我的网站相同的名称)下运行.

I have configured an MVC application under a dedicated AppPool. The apppool runs under the ApplicationPoolIdentity (which in my case would be the user IIS AppPool\accountinfo.local = the same name as my website).

我在根文件夹上完全控制了该用户，并确保继承了权限.

I gave full control to this user on the root folder and made sure that the permissions are inherited.

当我访问主页时，它运行良好并且可以访问它.但是，当我尝试访问位于子文件夹(Content/Site.css)中的静态内容时，出现错误401.3.

When I access the home page it runs fine and I can access it. However, when I try to access my static content, which is in a subfolder (Content/Site.css) I get an error 401.3.

我已经确保权限是继承的，如果我进入有效权限，我可以看到该用户确实拥有完全控制权.

I have made sure that permissions are inherited and if I go to effective permissions I can see that this user does have full control.

我启用了失败的请求跟踪以及安全审核，但是我没有任何日志文件，也没有事件查看器中的任何事件.

I have enabled failed request tracing and also security auditing but I don't get any log files, nor any events in the event viewer.

我在这里想念什么?

推荐答案

好的，我明白了.

显然，对静态内容的请求不是通过applicationIdentity而是通过标准的IUSR帐户.

Apparently requests for static content don't go through the applicationIdentity but through the standard IUSR account.

一旦我授予该用户对该文件夹的读取权限，它便开始工作.

Once I gave this user read permissions on the folder, it started working.

今天学到一些新东西.

这篇关于具有ACL和静态内容的IIS 8 401.3的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！