If you are able to write to a file share then it should work. Can you figure out when you turn off impersonation what credentials printer is getting accessed. That's the only difference between impersonation On and Off. Thanks, Don. -----Original Message----- From: Keith Davis [mailto:keithdavis@xxxxxxxxxxxxxxx] Sent: Friday, February 05, 2010 2:11 PM To: Venkat Raman Don; Pierre Joye Cc: Robert; php-windows@xxxxxxxxxxxxx Subject: RE: What about php 5.3 and printers or PHP_PRINTER.DLL ? I understand that. What I meant, is that the user has permissions to both (it's my account.) I'm a domain admin. Keith Davis (214) 906-5183 -----Original Message----- From: Venkat Raman Don [mailto:Don.Raman@xxxxxxxxxxxxx] Sent: Friday, February 05, 2010 4:05 PM To: Keith Davis; Pierre Joye Cc: Robert; php-windows@xxxxxxxxxxxxx Subject: RE: What about php 5.3 and printers or PHP_PRINTER.DLL ? If the authorized user has access to printer it should work. BTW, access to shared files or network share and printer are two different things. Writing to file share doesn't mean that you can connect to printer too. See if the authorized user can indeed connect to printer. Thanks, Don. -----Original Message----- From: Keith Davis [mailto:keithdavis@xxxxxxxxxxxxxxx] Sent: Friday, February 05, 2010 1:58 PM To: Venkat Raman Don; Pierre Joye Cc: Robert; php-windows@xxxxxxxxxxxxx Subject: RE: What about php 5.3 and printers or PHP_PRINTER.DLL ? Out entire site requires authorization to access it (Windows Authentication used.) I write files to other servers from under these credentials without any problem. Why would accessing the printer be an issue? Keith Davis (214) 906-5183 -----Original Message----- From: Venkat Raman Don [mailto:Don.Raman@xxxxxxxxxxxxx] Sent: Friday, February 05, 2010 3:55 PM To: Keith Davis; Pierre Joye Cc: Robert; php-windows@xxxxxxxxxxxxx Subject: RE: What about php 5.3 and printers or PHP_PRINTER.DLL ? You will need to give the authenticated user IIS is using (depends on what kind of authentication method is set on your site) access to printer in that case. IIS7 adds a default builtin user account IUSR which is user while running under anonymous authentication. However it is different on IIS6 which uses IUSR_machine_name under anonymous authentication. I would say best way is to run your application under a credential which has access to printer. If you add your local IUSR account to have access to printer, this will not work on IIS6 where you will need to give the default user IUSR_machine_name access too. Also, Ruslan sent some good links which explains this impersonation in detail. Look at that for further details. Thanks, Don. -----Original Message----- From: Keith Davis [mailto:keithdavis@xxxxxxxxxxxxxxx] Sent: Friday, February 05, 2010 1:43 PM To: Venkat Raman Don; Pierre Joye Cc: Robert; php-windows@xxxxxxxxxxxxx Subject: RE: What about php 5.3 and printers or PHP_PRINTER.DLL ? No, when I turn it off it works. When I turn it back on (the way we had it before, and need it), it generates the error. Keith Davis (214) 906-5183 -----Original Message----- From: Venkat Raman Don [mailto:Don.Raman@xxxxxxxxxxxxx] Sent: Friday, February 05, 2010 3:42 PM To: Keith Davis; Pierre Joye Cc: Robert; php-windows@xxxxxxxxxxxxx Subject: RE: What about php 5.3 and printers or PHP_PRINTER.DLL ? When you have fastcgi.impersonate set to 1, IIS tries to impersonate the security token of the calling client. This means, for example if an IIS site has 'Anonymous' authentication off and let's say Windows authentication on, 'Windows' authenticated user will be impersonated by PHP main thread and all the files and other system resource will be accessed using the authenticated Windows user security tokens. So if that user/credential doesn't have permission to access a resource it will fail. In your case it seems after fastcgi.imersonate is set, the credential/secutrity token impersonated of the user has credential to access the printer. Hope this helps. Thanks, Don. -----Original Message----- From: Keith Davis [mailto:keithdavis@xxxxxxxxxxxxxxx] Sent: Friday, February 05, 2010 1:32 PM To: Pierre Joye Cc: Robert; php-windows@xxxxxxxxxxxxx Subject: RE: What about php 5.3 and printers or PHP_PRINTER.DLL ? IIS 7 on my dev machine, which is what I am testing on. The prod server is IIS 6. Keith Davis (214) 906-5183 -----Original Message----- From: Pierre Joye [mailto:pierre.php@xxxxxxxxx] Sent: Friday, February 05, 2010 3:30 PM To: Keith Davis Cc: Robert; php-windows@xxxxxxxxxxxxx Subject: Re: What about php 5.3 and printers or PHP_PRINTER.DLL ? which webserver do you use? On Fri, Feb 5, 2010 at 10:27 PM, Keith Davis <keithdavis@xxxxxxxxxxxxxxx> wrote: > How is that user specified? > > > > Keith Davis (214) 906-5183 > > -----Original Message----- > From: Pierre Joye [mailto:pierre.php@xxxxxxxxx] > Sent: Friday, February 05, 2010 3:26 PM > To: Keith Davis > Cc: Robert; php-windows@xxxxxxxxxxxxx > Subject: Re: What about php 5.3 and printers or > PHP_PRINTER.DLL ? > > On Fri, Feb 5, 2010 at 10:16 PM, Keith Davis > <keithdavis@xxxxxxxxxxxxxxx> wrote: >> I found a post that said to set fastcgi.impersonate = 0 to fix this >> problem. It did. >> >> Can someone clarify what that setting does? > > It allows a server to run php-cgi under a given user. But that should > not affect printer at all, except if the user does not have the > permission to use this printer. > > Cheers, > -- > Pierre > > @pierrejoye | http://blog.thepimp.net | http://www.libgd.org > > This message (including any attachments) may contain confidential or otherwise privileged information and is intended only for the individual(s) to which it is addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secured or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message or that arise as a result of e-mail transmission. If verification is required please request a hard-copy version from the sender. > > www.pridedallas.com > > -- Pierre @pierrejoye | http://blog.thepimp.net | http://www.libgd.org -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
