DOCUMENT:Q285159  14-MAR-2001  [iis]
TITLE   :How to Create Virtual Directories to a Remote NetWare Share
PRODUCT :Internet Information Server
PROD/VER::5.0
OPER/SYS:
KEYWORDS:

======================================================================
-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Internet Information Services version 5.0 
-------------------------------------------------------------------------------

SUMMARY
=======

This article describes how to create a virtual directory in Internet Information
Services (IIS) 5.0 to connect to a Novell NetWare share.

To gain access to the NetWare File System, IIS must pass credentials with the
appropriate permissions for the databases that you are attempting to access. By
default, IIS attempts to pass credentials for the IUSR_MachineName account.

NOTE: The IUSR_MachineName account appears as though it is being used by IIS 5.0
Web sites that are running out of process. However, the IWAM_Machine Name
account impersonates the IUSR_MachineName account. Therefore, the IUSR account
is the only account discussed in the following resolution.

NetWare uses the NetWare Directory Service to authenticate users to its servers.
To access any file systems, a legitimate account for the credentials that are
being passed must exist on the NetWare server.

MORE INFORMATION
================

To access the Novell NetWare 5 shares running only TCP/IP, perform the following
steps exactly:

1. On the IIS computer that is attempting to communicate with Novell, install
   the Novell NetWare Client for Microsoft Windows NT (Required). During setup,
   choose a custom installation, choose to install into an NDS system, and only
   choose IP for the protocol. Do not install Workstation Manager.

2. On the computer running IIS 5.0, open Control Panel, double-click
   Administrative Tools, double-click Computer Management, click to expand Local
   Users and Groups, double-click Users, right-click the IUSR_Machine Name
   account, and then click Set Password. Change the password, save it, and then
   close the Computer Management console.

3. In the Internet Services Manager, do the following:

   a. Right-click the server name (for example, MYWEB01) under Internet
      Information Services.

   b. Click the Edit button next to WWW to open the master properties.

   c. On the Directory Security tab, click the Edit button next to Anonymous and
      Authentication methods.

   d. On the Authentication Methods tab, click Edit under the Anonymous section
      to open the Anonymous User properties.

   e. Click to uncheck the option for IIS to control the password, and then
      enter the password that you changed in step 2.

4. Open the NetWare Administrator located in the sys: volume in the Public\WIN32
   folder of the NetWare 5 Server. In the root of the container where the server
   exists, create an IUSR_Machine Name account that is identical to the one on
   the Windows NT Server computer. In the properties for that user, click
   Password Restrictions, and then make sure that only the Require password
   option is checked. Click Set Password, and then set the password to that of
   the Windows NT account. Do not require passwords to be changed on the NetWare
   system.

   NOTE: This is the most crucial step to the entire process.

5. In the NetWare Administrator, open the properties for the newly created IUSR,
   click the Rights to files and directories tab, and then add the appropriate
   permissions to the database files that need to be accessed. Give at least
   Read permissions, unless changes will be made through the Internet, which
   requires all permissions except Supervisor and Access Control.

NOTE: After you add the virtual directory in IIS, you may see a red stop sign
with the word "Error" inside. This warning appears because IIS does not support
the UNC connection to a computer in a domain that does not have a trust
relationship with the domain in which the IIS server resides.


Additional query words: iis 5

======================================================================
Keywords          :  
Technology        : kbiisSearch kbiis500
Version           : :5.0
Issue type        : kbinfo

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 2001.