[pubcookie-dev] IIS 3.2.1 filter root site protection inheritance problems

Nathan Dors dors at cac.washington.edu
Thu Oct 20 16:35:41 PDT 2005


On Tue, 4 Oct 2005, Bradley Schwoerer wrote:

> APPID is the value that is not being picked up after looking through it
> more.  If APPID is set at the root directories and directories uSo no the
> pbc.reg.txt does not demonstrate it.  The following needs to be added:
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PubcookieFilter\defaul
> t]
> "AppId" = "root_site"

Alright. That helps. I see and confirm that the mmc gui doesn't 
display "root_site" for the webapp appid. This is incorrect. Let 
us know if you've already spotted the error in the mmc gui logic 
for determining this value. It sounds like it's either not picking 
up the default value or overriding it with the first-folder-node 
name when it shouldn't. We'll take a look at it.

> This is an issue in the case where the root of the site has one appid and
> you want to set the AppId of the folder to the name of the folder.

In light of the problem above, I see why this is important. I'm 
not sure it will be as important once that problem has been fixed, 
but I think we're in agreement that the gui should allow you to 
set values even if they match the inherited value. So, another 
item for us to look into.

> Actually I guess what I explained in the first place and your reg works, not
> what I was trying to do.  If you move the open directory up one level it
> does not work with just /open; again the root site has to be protected.
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PubcookieFilter\open]
> "AuthType"="NONE"

Another confirmation. I see what you mean. We'll have to look into 
this too. I'd like to address each of these for the final 3.3.0 
release. I'm not sure if we'll address them in time for the first 
beta.

-Nathan


More information about the pubcookie-dev mailing list