Welcome to ISAserver.org

Permissions needed to update domain set?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Management >> Permissions needed to update domain set?

Page: [1]

Message

<< Older Topic Newer Topic >>

Permissions needed to update domain set? - 1.Nov.2006 2:49:30 PM

935main

Posts: 2
Joined: 30.May2006
Status: offline

Hello,

I'm writing an ASP.Net application that will allow users to dynamically
update their "white list" (domain set). I'm using impersonated
authentication so I can log who they are (so we know who adds what
sites to the white list) but that's making my calls to the ISA objects
fail. It works fine when the domain admin uses the page, but as soon
as a normal user tries to add a site to the domain set they get this
message:

Error Message:
=========================================================
Unable to cast COM object of type 'FPCLib.FPCClass' to interface type
'FPCLib.IFPC'. This operation failed because the QueryInterface call on
the COM component for the interface with IID
'{77C180DA-AF0D-4314-8FA7-BA0C5B8C9E94}' failed due to the following
error: Error loading type library/DLL. (Exception from HRESULT:
0x80029C4A (TYPE_E_CANTLOADLIBRARY)).
=========================================================

Here's the code that the ASP.Net page is trying to run:
=========================================================
protected void btnAdd_Click(object sender, EventArgs e)
   {
       if (internetAccess == null)
       {
           internetAccess = new InternetAccess();
           internetAccess.Connect(
               ConfigurationManager.AppSettings["domain"],
               ConfigurationManager.AppSettings["machine"],
               ConfigurationManager.AppSettings["user"],
               ConfigurationManager.AppSettings["password"]
           );
       }

       internetAccess.AddDomain(domainSetName, domainName.Text);
   }

public class InternetAccess
   {
       FPCClass fpcClass;
       FPCArray fpcArray;

       public InternetAccess()
       {
       }

       public void Connect(string domain, string machine, string user, string password)
       {
           fpcClass = new FPCClass();
           fpcArray = fpcClass.Arrays.Connect(machine, user, domain, password);
       }

       public void AddDomain(string domainSetName, string domainToAdd)
       {
           FPCRuleElements r = fpcArray.RuleElements;
           FPCDomainNameSets d = r.DomainNameSets;
           foreach (object var in d)
           {
               FPCDomainNameSet domainSet = var as FPCDomainNameSet;
               if (domainSet.Name == domainSetName)
               {
                   try
                   {
                       domainSet.Add(domainToAdd);
                       domainSet.Save(true, true);
                       break;//don't keep walking through the list.
                   }
                   catch (Exception ex)
                   {
                       throw ex;
                   }
               }
           }
       }
   }

=========================================================

As you can see, I'm sending in credentials to the Connect() method,
which I thought would make it so any user could use this page and
update the domain set, but it's failing.

Anyone know what I'm doing wrong? Do the credentials I send to
Connect() not matter? Do I have to run this code as a local admin on
my ISA box?