APS query form resturns no results

[hansm]

I am using indexing service to index files on a Windows Server 2003 and on a
Windows 2000 server. Further I use the (modified) query.asp to query the
catalog. This works fine on W2k, but on W2k3 the same code always returns "No
documents matched the query". But when I enter the query from the MMC console
on W2k3, it gives the expected results.
What am I doing wrong?

br, Hans

[Miroslav Pragl]

does IUSR_... account have permissions to see these files?

MP

Post by hansm
I am using indexing service to index files on a Windows Server 2003 and on a
Windows 2000 server. Further I use the (modified) query.asp to query the
catalog. This works fine on W2k, but on W2k3 the same code always returns "No
documents matched the query". But when I enter the query from the MMC console
on W2k3, it gives the expected results.
What am I doing wrong?
br, Hans

[hansm]

That was it. Thank you very much!

br, Hans

Post by Miroslav Pragl
does IUSR_... account have permissions to see these files?
MP

Post by hansm
I am using indexing service to index files on a Windows Server 2003 and on a
Windows 2000 server. Further I use the (modified) query.asp to query the
catalog. This works fine on W2k, but on W2k3 the same code always returns "No
documents matched the query". But when I enter the query from the MMC console
on W2k3, it gives the expected results.
What am I doing wrong?
br, Hans

[WenJun Zhang[msft]]

Thanks Miroslav.

Indexing Service stores file ACL info into the catalog and it doesn't
return results on which current query account doesn't have permission.
Otherwise there will be a big security flaw.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

This posting is provided "AS IS" with no warranties, and confers no rights.

[DavidAtWork]

Can someone elaborate on what security / where for different situations?
ex....
It works fine with allow annonymous access to the site.
What if you want your site password protected but want those people to be
able to search that area. What security goes where to get this to work
without opening up a big hole?
Please and thanks....
--
David

Post by WenJun Zhang[msft]
Thanks Miroslav.
Indexing Service stores file ACL info into the catalog and it doesn't
return results on which current query account doesn't have permission.
Otherwise there will be a big security flaw.
Best regards,
WenJun Zhang
Microsoft Online Partner Support
This posting is provided "AS IS" with no warranties, and confers no rights.

[Miroslav Pragl]

1. enable NTFS security on files
2. disable anonymous access
3. allow NTLM auth

if your users use MSIE they won't even notice they've been authenticated.
They'll just see results they're allowed to see

P.S. don't tighten the ASP file much or nobody will get the search page :)

Miroslav

Post by DavidAtWork
Can someone elaborate on what security / where for different situations?
ex....
It works fine with allow annonymous access to the site.
What if you want your site password protected but want those people to be
able to search that area. What security goes where to get this to work
without opening up a big hole?
Please and thanks....
--
David

Post by WenJun Zhang[msft]
Thanks Miroslav.
Indexing Service stores file ACL info into the catalog and it doesn't
return results on which current query account doesn't have permission.
Otherwise there will be a big security flaw.
Best regards,
WenJun Zhang
Microsoft Online Partner Support
This posting is provided "AS IS" with no warranties, and confers no rights.

[Miroslav Pragl]

hope my quick answer was clear and you enforced NTLM security on your ASP
page instead of giving everyone right to see everything via IUSR_ account :)

Miroslav