SellerDeck
IIS6 Setup Guide
Revision History
Version 3.0.0
06/06/2003 – FTP user section enhanced with diagram.
01/06/2003 – Physical folder creation, folder creation within IIS, Perl association, server extensions and FTP user details added.
04/12/2003 – Added Network settings and improved readability of document. 16/02/2004 – Added Defining home page section, network dialogue trouble-shooter
24/02/2004 – Expanded on the setting of NTFS permissions and clarified setting up the virtual folders. 08/03/2004 – Improved readability of NTFS section, included more screenshots. Added the ‘Web sharing section. Improved ‘Defining website homepage’
09/03/2004 – Added Installing Perl section.
Table of Contents
Overview
1
Before You Begin
2
FTP User – Setting Up A User ...2
Perl Interpreter...2
Perl Checks ...2
Setting the Folder Structure
4
Physical Folder Structure...4Physical Folder Permissions
5
Website Home folder...5acatalog Folder NTFS Permissions...11
Cgi-bin Folder NTFS Permissions...12
NTFS Permissions Summary...13
Folder Creation within IIS MMC
14
Creating the website in IIS ...14CGI-BIN Folder...16
CGI-BIN Virtual Directory Creation ...16
Cgi-bin IIS Check ...19
Cgi-bin Perl Association...20
Web Server Extensions
21
Allowing the Perl Extension within IIS ...21FTP User
22
Setting the FTP user Home Folder ...22Defining the Home Page In IIS
23
Changing the Default Page ...23Web Sharing ...25
Configuration of SellerDeck
26
Network Settings ...26Troubleshooting
27
Cgi-bin Accessed Denied ...27Network Password Dialog-box...27
Overview
Before You Begin
FTP User – Setting Up A User
SellerDeck requires an FTP user to be set up on the server. This user should be made part of the ‘users’ group. Please refer to Windows 2003 documentation for more information on creating user accounts.
Perl Interpreter
Perl must be installed on the server for SellerDeck to run. This can be downloaded from
http://www.activestate.com/Products/ActivePerl/Download.html. You need to download and install the ‘Windows MSI’ package on the server. Please note SellerDeck recommend a Perl version the same or higher than 5.006.
Perl Checks
The following checks should be made to ensure that Perl is installed on the Server.
In a command window check that Perl is installed and will run: C:\> perl –v
The output should be something like:
Note: If the perl –v returns a message along the lines: “‘perl –v’ is not recognised as an internal or external
command, operable program or batch file.” is displayed then perl is most likely not installed.
If Perl is not installed, it can be downloaded from the ActiveState web site:
Setting the Folder Structure
Physical Folder Structure
Open Windows Explorer, create a folder within
‘C:\Inetpub\wwwroot’ on the server. In this instance the folder being created is called ‘devsite’. This is known as the root folder for your site.
Physical Folder Permissions
Website Home folder
NTFS permissions must be set on each of the physical folders that you created earlier. This ensures the correct access rights are assigned for the FTP and web users. An example of adding a user to a folder’s properties is shown below.
Right click on the ‘devsite’ folder in Windows Explorer, and select ‘sharing and security’
Click ‘Add’, and a small window called ‘Select Users, Computers, or Groups’ will appear:
Click ‘Locations’. If the ‘Enter Network Password box appears, then click ‘Cancel’.
The ‘Locations’ box appears. Select your server (in this case the server name is ‘W3K’) and click ‘OK’.
A large ‘Select Users or Groups’ window will appear. Click ‘Find Now’.
Click ‘OK’ in the small ‘Select Users or Groups’ Window. You will notice that your user has appeared in the window (in this case ‘W3K/Develop’).
In the security tab, select the FTP user (in this case ‘Develop’) and set the following permissions:
• Modify
• Read & Execute • List Folder Contents • Read
Click Advanced’, and the ‘Advanced Security Settings for devsite’ window will appear. Uncheck ‘Allow inheritable permissions from the parent to propagate this object’. This will need to be carried out when setting up the NTFS permissions for the ‘acatalog’ folder, (page 11) and the NTFS permissions for the ‘cgi-bin’ (page 12).
Click ‘Copy’ in the window shown below.
Then click ‘OK’
The Security settings for ‘devsite’ will be displayed again. You may need to add an Internet Guest account user
follow the steps for assigning the FTP user ‘permissions,’ except the FTP user will be substituted for the Internet Guest Account. Once the ‘IUSR_HOSTNAME’ account is shown under the ‘Security’ tab for ‘devsite’, (remember, you will need to set the following permissions for the ‘IUSR_HOSTNAME’ account.
• Modify
• Read & Execute • List Folder Contents • Read
• Write
See the ‘devsite’ properties window below. In this case, the Internet Guest Account is called ‘IUSR_ACTINIC-W3K’.
Make sure that there are no 'Deny' permissions set for the 'IUSR' account. If there are, click 'Advanced', locate 'Internet Guest Account' in the list and click 'Edit'. Uncheck all of the properties in the 'Deny' column. Click 'OK' and then 'OK' again.
There should not be any users shown in the Security tab in the ‘devsite’ properties window other than:
• Administrators
• FTP User (in this case ‘Develop’)
• Internet Guest Account (in this case ‘IUSR_ACTINIC-W3K’)
• System
acatalog Folder NTFS Permissions
The same permissions should be applied to the acatalog folder as the ‘Website Home’ folder.
The ‘IUSR_HOSTNAME’ (in this case ‘IUSR_ACTINIC-W3K’) should have the following permissions checked in the Allow column:
• Modify
• Read & Execute • List Folder Contents • Read
• Write
The FTP user (‘Develop’ is this example) should have the following permissions checked in the ‘Allow’ column:
• Modify
• Read & Execute • List Folder Contents • Read
• Write
Cgi-bin Folder NTFS Permissions
NTFS permissions also need to be set up for the ‘cgi-bin folder.’ Please note that these are different to the ‘acatalog’ and website home folders. If you need further assistance with assigning user permissions, please revisit page 5. This shows the FTP user being added to the website home folder.
The ‘IUSR_HOSTNAME’ (in this case ‘IUSR_ACTINIC-W3K’) should have the following permissions checked in the ‘Allow’ column:
• Read & Execute • List Folder Contents • Read
The FTP user (‘Develop’ is this example) should have the following permissions checked in the ‘Allow’ column:
• Modify
• Read & Execute • List Folder Contents • Read
• Write
You may need to add the ‘Everyone’ user. See page 5 for more information on adding user permissions.
NTFS Permissions Summary
Please see below for a summary of the permission settings on the website folders:
Folder Users NTFS Permissions
Devsite Administrator Full control Develop (FTP user) Modify
Read & Execute List Folder Contents Read
Write Internet Guest Account Modify
Read & Execute List Folder Contents Read
Write
System Full control
Folder User Permissions
acatalog Administrator Full control
Develop (FTP user) Modify
Read & Execute List Folder Contents Read
Write Internet Guest Account Modify
Read & Execute List Folder Contents Read
Write
System Full Control
Folder User Permissions
cgi-bin Administrator Full Control
Develop (FTP user) Modify
Read & Execute List Folder Contents Read
Write
Internet Guest Account Read & Execute List Folder Contents Read
Everyone Read & Execute
List Folder Contents Read
Folder Creation within IIS
MMC
Creating the website in IIS
Right click on the ‘Web Sites’ folder in IIS and select ‘New | Web site’.
Click the ‘Next’ button
Enter a descriptive name for the site, in this case ‘W3K’.
Click the ‘Next’ button
Select the IP Address to use for this Web Site from the drop-down list. Change the Port Number if a port other than 80 is to be used. If Host Headers are to be used, enter the Host Header for this site.
Click the ‘Next’ button.
Click ‘OK’. You will see the window below containing the path to your website root folder. (‘C:\Inetpun\wwwroot\devsite’ in this example) Make sure that ‘Allow anonymous access to this Web site’ is ticked.
Click ‘Next’ and set the following permissions:
Click the ‘Next’ button and then finish.
CGI-BIN Folder
The cgi-bin folder has to exist on two levels:
1. The physical level – actually on the hard disk – we created this on page 2
2. The Virtual level – within IIS
The Virtual Directory Creation Wizard will appear:
Click ‘Next’
Enter ‘cgi-bin’ in the directory alias box:
Click ‘Next’
Click ‘Next’.
On the next screen, check ‘Read,’ ‘Run Scripts’ and ‘Execute’ in the Access Permissions.
Then click ‘Next’.
You can then click ‘Finish’ when the ‘You have successfully completed the Virtual Directory Creation Wizard’ appears.
Cgi-bin IIS Check
In IIS, right click on the cgi-bin under your Web Site and select properties. The site is ‘W3K’ in this example.
In the screen that follows, set the following:
• Select – ‘A directory located on this computer’ • Local Path: ‘C:\Inetpub\wwwroot\devsite\cgi-bin’ • Select – ‘Read’ and ‘Log visits’
• Application Name: ‘cgi-bin’ • Select ‘Index this resource’
Cgi-bin Perl Association
Whist still in the ‘cgi-bin Properties window’, click
‘Configuration’. Select ‘Mappings’, and look in the list to see if there is an extension of '.plx':
If there is, select it and click 'Edit'. Make sure the settings are as follows:
• Executable: ‘C:\Perl\bin\perlis.dll’ • Verbs limited to ‘GET, HEAD, POST’
• 'Script Engine' and 'Verify that file exists' checked Failure to assign the perl correctly will result in a 'Page cannot be displayed' error when you attempt to run a perl script.
Web Server Extensions
Allowing the Perl Extension within IIS
IIS 6 allows you to allow or disallow web server extensions. As a default, perl is not permitted to run on the server. If you attempt to run perl with configuring the extensions, you will receive a ‘Page Cannot be Displayed Error.’
FTP User
Setting the FTP user Home Folder
In the IIS MMC, select the ‘Default’ FTP Site or the site associated with Actinic, right click and select Properties, then click on the ‘Home Directory’ tab.
Check that your have ‘Read’, ‘Write’ and ‘Log Visits’ selected. Also have ‘UNIX’ selected as the ‘Directory listing style’. You should have the path to your ‘Website home folder’ in the ‘Local path’ textbox.
Defining the Home Page In
IIS
Changing the Default Page
The default home page in IIS is set to default.htm or default.asp, but Catalog uses index.html as the home page.
To add index.html open up the IIS MMC, right click on the Web Site (in this case ‘W3K) and select Properties:
Select the ‘Documents’ tab:
Click the ‘Add’ button and add ‘index.html’:
Click ‘OK’.
Click ‘OK’.
Web Sharing
Open up Explorer and drill down to the ‘cgi-bin’ folder you created on page 2, right click on it, and select ‘sharing and security’, then click the ‘Web sharing tab’. If there are multiple Web Sites, then there will be a drop down list associated with ‘Share on’, select the website you created on page 14, (in this case ‘W3K’).
The settings should be as follows: • Checked – ‘Share this folder’. • Aliases - ‘cgi-bin’
Configuration of SellerDeck
Network Settings
The Network settings should be as follows:
Troubleshooting
Cgi-bin Accessed Denied
There are occasions when access to the cgi-bin directory is denied after following the above guidelines.
It may become necessary to delete the cgi-bin virtual directory in IIS and then the cgi-bin directory in Windows Explorer, and then re-create both and reapply the necessary permissions.
Network Password Dialog-box
If an “Enter Network Password” dialog-box appears after clicking on the Add To Cart button:
The ‘Internet Guest Account’ does not have ‘Read & Execute’ permissions on the cgi-bin directory. See page 5 for more details.
