Bug: omero_web_iis.py fails on win-2k8

[jamoore]

Permissions issues

config.xml and OMEROweb.log both need to be readable by IUSR. This should probably be added to the omero_web_iis.py script (an example is available from ​Tim Golden).

WMI Issue

c:\OMERO.server-4.3.0-DEV-c68442cd\lib\python>python omero_web_iis.py install
Traceback (most recent call last):
  File "omero_web_iis.py", line 51, in <module>
    HandleCommandLine(params)
  File "C:\Python25\lib\site-packages\isapi\install.py", line 724, in HandleCommandLine
    handler(conf_module_name, params, options, log)
  File "C:\Python25\lib\site-packages\isapi\install.py", line 615, in InstallModule
    Install(params, options)
  File "C:\Python25\lib\site-packages\isapi\install.py", line 494, in Install
    CreateDirectory(vd, options)
  File "C:\Python25\lib\site-packages\isapi\install.py", line 289, in CreateDirectory
    target_dir = GetObject(FindPath(options, params.Server, parent))
  File "C:\Python25\lib\site-packages\isapi\install.py", line 144, in FindPath
    return FindWebServer(options, server)+"/ROOT"+name
  File "C:\Python25\lib\site-packages\isapi\install.py", line 205, in FindWebServer
    server = GetWebServer(server_desc)
  File "C:\Python25\lib\site-packages\isapi\install.py", line 177, in GetWebServer
    path = LocateWebServerPath(description)
  File "C:\Python25\lib\site-packages\isapi\install.py", line 158, in LocateWebServerPath
    iis = GetObject(_IIS_OBJECT)
  File "C:\Python25\Lib\site-packages\win32com\client\__init__.py", line 72, in GetObject
    return Moniker(Pathname, clsctx)
  File "C:\Python25\Lib\site-packages\win32com\client\__init__.py", line 87, in Moniker
    moniker, i, bindCtx = pythoncom.MkParseDisplayName(Pathname)
pywintypes.com_error: (-2147221020, 'Invalid syntax', None, None)

[jmoore]

According to ​http://groups.google.com/group/isapi_wsgi-dev/browse_thread/thread/8fc528ceb1bafcd4 "IIS 6.0 Management Compatibility" has to be installed. This will need to be documented on the installation page.

Lowering to "major" since it's only a documentation issue.

[jmoore]

Or I simply can't read. Docs are there, but I was following from the top to the bottom. I'll re-arrange a bit so it can't be missed. Worst case, if someone searches for the error, they'll find this.

Lowering again to "trivial" :)

[jmoore]

Reworked the WMI issue under ​https://www.openmicroscopy.org/site/support/omero430/server/install_web (the working copy of the documentation). But since there are other tasks (like modifying the permissions of OMEROweb.log), I'm upping the priority again.

[jmoore]

Going to try to implement the security modifications in omero_web_iis.py

[jmoore]

Using the recipe available ​here (with modifications) I get the results:

c:\Documents and Settings\ome\Desktop\test\lib\python>python omero_web_iis.py
Permitting IIS to access ..\..\etc\grid\config.xml


c:\Documents and Settings\ome\Desktop\test\etc\grid\config.xml NT AUTHORITY\SYSTEM:F
                                                               BUILTIN\Administrators:F
                                                               OME-DEV-SVR\ome:F



c:\Documents and Settings\ome\Desktop\test\etc\grid\config.xml NT AUTHORITY\IUSR:F
                                                               NT AUTHORITY\SYSTEM:(ID)F
                                                               BUILTIN\Administrators:(ID)F
                                                               OME-DEV-SVR\ome:(ID)F

Permitting IIS to access ..\..\var\log\OMEROweb.log


c:\Documents and Settings\ome\Desktop\test\var\log\OMEROweb.log NT AUTHORITY\SYSTEM:F
                                                                BUILTIN\Administrators:F
                                                                OME-DEV-SVR\ome:F



c:\Documents and Settings\ome\Desktop\test\var\log\OMEROweb.log NT AUTHORITY\IUSR:F
                                                                NT AUTHORITY\SYSTEM:(ID)F
                                                                BUILTIN\Administrators:(ID)F
                                                                OME-DEV-SVR\ome:(ID)F

[jmoore <josh@…>]

(In [52c3182d5904ca6138f324b140cdb8efa54a151e/ome.git] on branch develop) Changing ACLS from omero_web_iis.py (Fix #5527)

[khgillen]

It should be noted that a full "IIS Management Compatibility" install is not required - only IIS 6 WMI Compatibility, and IIS 6 Metabase Compatibility. This will also make it into a Docs PR hopefully soon.