Home Access Plus+

[Zenden]

Since Forms Auth carries major security risks, it was dropped as a supported auth type

 

lol well i guess that explains that! thanks for the quick reply

[sister_annex]

@Zenden; We use FBA through ISA 2006 - works great with AD and passes all the relevant info needed for HAP to work fine (over SSL and non SSL if required - we use SSL)

 

Obviously if you don't use ISA then this is pointless but thought I'd offer what we do just in case

 

Mark

[robncar]

First of all, thank you for making this available! That said, here's the issue...

 

We are attempting to use Integrated Auth but can't connect to a user's home drive (mine), in Basic Auth it works fine.

 

Basic Version= Error: Unauthorised Access... You have attempted to access a restricted resource

 

Enhanced Version= An Error Occured

 

Sorry if this has been asked before. Unfortunately, Basic Auth is unacceptable to my MGMT.

[nickbro]

It's all down to IIS and Identity Impersonation. With anything but Basic, the identity Impersonation doesn't work properly. Identity Impersonation means that the web process imitates the user rather than the process's user. You can in IIS set the App Pool to use a domain admin account to get round this, ish. You loose all security

[robncar]

It's all down to IIS and Identity Impersonation. With anything but Basic, the identity Impersonation doesn't work properly. Identity Impersonation means that the web process imitates the user rather than the process's user. You can in IIS set the App Pool to use a domain admin account to get round this, ish. You loose all security

 

Yes, thank you. I fiddled with the Identity Impersonation a tad but got rather frustrated - no luck. I've just completed a chat with MGMT and they have agreed to Basic Auth with SSL. So, we should be good. Currently, I have our web developer working on branding and then we'll push this out to the community.

[linkazoid]

I'm looking to upgrade ours to v5.4.5 but im unsure what version i'm currently on.

 

Is there anyway to tell wether we're on 5.3.x or 5.4.x?

 

Thanks,

Michael

[sister_annex]

I'm looking to upgrade ours to v5.4.5 but im unsure what version i'm currently on.

 

Is there anyway to tell wether we're on 5.3.x or 5.4.x?

 

Thanks,

Michael

 

Easiest way i can think of... in the bin folder where your HAP is installed, select the HAP.web.dll and pull up the file properties the details should have a file version and a product version, this will be the version you are running (ours is currently 5.4.5)

 

HTH

 

Mark

[nickbro]

1) Right click on any HAP page and look at the source, should me a meta tag.

2) Right click on ~/bin/hap.web.dll and look at the file properties

3) Look at the auto update message on the default page (domain admins only)

[rpettit]

I have heard great things about Home Access Plus and am looking forward to seeing it up on our Windows Server 2008 R2 system. Is there any advice people can give? I am struggling with editing the web.config file.

[sister_annex]

I have heard great things about Home Access Plus and am looking forward to seeing it up on our Windows Server 2008 R2 system. Is there any advice people can give? I am struggling with editing the web.config file.

 

Can you give a little more detail on what problems you're experiencing? There are quite a few people here who will be able to help.

[robncar]

Back again...

 

Two questions related to branding:

 

1. Where would we change the "My School Computer" link text in the basic and enhanced drive view(s)?

 

2. Would we need to modify the Silverlight code to brand the Enhanced drive page? Visual Studio?

 

Thanks again! - Rob.

[nickbro]

Back again...

 

Two questions related to branding:

 

1. Where would we change the "My School Computer" link text in the basic and enhanced drive view(s)?

 

2. Would we need to modify the Silverlight code to brand the Enhanced drive page? Visual Studio?

 

Thanks again! - Rob.

 

Both of those options would require tweaking the source code, mycomputer.aspx.cs and mycomputersl.aspx.cs

[2097]

Just upgraded to the newest Version of this brilliant Program , So thank you Nick.

Having a little problem with the layout , have edited it a bit to get everything lined up properly . But still seem to have this problem in IE .

 

When ever i Hover over a Drive it shifts all the others away ? normally to the right

 

http://img213.imageshack.us/img213/4972/erroryh.jpg

 

Uploaded with ImageShack.us

[linkazoid]

I'm finally feeling like this can be rolled out to staff, but I want to add some drives that can only be seen by us.

 

Do I just need to add our Group ICTTechSupport to in the web.config and/or somewhere else.

 

Can I then do this? As currently its not working.

 

Thanks,

 

Michael

[sister_annex]

Do you get a specific Error, or does it just not show?

 

AFAIK the enablereadto will work on Domain security groups so what you have there should work.

 

In your ADconnectionString entry, have you specified an OU below the location of the Group you are trying to enter?

 

Our staff only one is configured as below;

 

 

I've just logged in as a student test account and the drive is not visible

 

HTH

[2097]

I'm finally feeling like this can be rolled out to staff, but I want to add some drives that can only be seen by us.

 

Do I just need to add our Group ICTTechSupport to in the web.config and/or somewhere else.

 

Can I then do this? As currently its not working.

 

Thanks,

 

Michael

 

is the NAS binded to AD , and the correct security groups been put in place ?

 

that could be your issue .

 

or maybe its because you have a _ in the foldername

[nickbro]

Is icttechsupport an ad group or an ou? Hap only sees ad groups not ous

[linkazoid]

icttechsupport is an AD group. Does it it need to be specified in the top section of the web.config file?

 

Michael

[sister_annex]

How about you pop up your web.config file (obviously remove your passwords) and we can take a look see if there is anything we can spot?

 

Mark

[Patman]

Does hardocoding the adminstrator password and username in the config file create a security concern? What users are people using in the strings

 

Also, what is the studentgroupname?

 

Thanks,

 

patman

[AngryTechnician]

Does hardocoding the adminstrator password and username in the config file create a security concern? What users are people using in the strings

I touched on this in an earlier comment in the thread. If the server became compromised (which you have to accept as a possibility when you are publishing externally) then potentially a malicious user could gain your domain admin credentials. I used a standard user account and it worked fine for me, but I'm only really using the file access part at the moment, so I have not tested the other functionality.

[sister_annex]

I touched on this in an earlier comment in the thread. If the server became compromised (which you have to accept as a possibility when you are publishing externally) then potentially a malicious user could gain your domain admin credentials. I used a standard user account and it worked fine for me, but I'm only really using the file access part at the moment, so I have not tested the other functionality.

 

You could always set up a standard user and delegate the permissions you wish that account to have thus not opening up your Domain Admin account details, of course this will limit what users can do but like AngryTechnician, we only use it for the file access as we have no need for the other parts.

[nicklec]

SOLVED - Left for information

 

Great program but i've come across a 'bug', does anyone else use this to 'Hand in' work from students? What I've got is a folder on our shared drive called 'hand in' with the following privs for the students:

- 'This folder' has List/Read privs for students

- 'Subfolders' has List/Read/Create/Write

- 'Subfolders and Files has Create/Write/Write Attr/Write Ex Attr/Read Permissions

 

The last privs is me clutching at straws somewhat because the following occurs:

 

I'm testing when a teacher creates a folder for a specific task/class underneath the 'hand in' parent folder for the pupils to place their work. The privs seem to work as intended, pupils can add a file to the folder but they cannot view any of the files. When done via HAP the upload is successful but the (silverlight) UI doesn't indicate this instead you are left with 'Uploading...' (even though the file has been 100% sent) - the HTML uploader seems to work fine.

 

Should the silverlight UI show 'upload complete' or similar? Does it require any different privs to the HTML uploader?

 

Thanks,

 

Nick

 

PS Just tried as an 'admin' user and the same thing occurs so I'm thinking this is perhaps an OSX issue - i've tried with Safari/Chrome; trying good old IE (on windows) now...

 

Yep sorry its silverlight on OSX being naughty .. i'll leave this info here incase anyone else needs it.

Edited February 17, 2011 by nicklec

[dezt]

I'm getting an error when I try and delete a file, does anyone else get this or has anyone seen this before. I have attached the error which occurs in both IE and Firefox.

[sister_annex]

hmmm,

 

Does the directory exist?

 

Can the logged in person delete it if they access it through a normal explorer window??

 

May be worth checking the perms of the item in question just in case...