Solved

ACT! Premier for Web not allowing logon

Posted on 2013-11-04
2
1,260 Views
Last Modified: 2013-12-04
I am working with a friend who has a 2003 SMB server running RRAS, Exchange and ACT!.  Circumstance required me to reset the netgear router.  I lost the original config with the open ports.

The ports I have opened are:
25 53 80 88 110 123 135 143 389 443-445 993 995 1025 1723 3268 4343 4443

Now when a remote user attempts to logon to ACT! via the web they receive the following error:

Configuration Error

Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

Parser Error Message: Could not create Windows user token from the credentials specified in the config file. Error from the operating system 'Logon failure: unknown user name or bad password.
'

Source Error:


Line 73:   <system.web>
Line 74:     <httpRuntime executionTimeout="1200" maxRequestLength="102400" />
Line 75:     <identity impersonate="true" userName="registry:HKLM\Software\AspNetProcess\ASPNET_SETREG,userName" password="registry:HKLM\Software\AspNetProcess\ASPNET_SETREG,password" />
Line 76:     <pages enableViewState="true" enableSessionState="true" theme="ACT" autoEventWireup="false" validateRequest="false" enableEventValidation="false">
Line 77:       <controls>

Source File: E:\ACT\Act for Web\APFW\web.config    Line: 75

I don't believe it is the web.config file since it has not changed since 2010.  

Thanks in advance for you assistance.

Steven
0
Comment
Question by:saburstyn
2 Comments
 
LVL 24

Accepted Solution

by:
diverseit earned 500 total points
ID: 39621975
Hi saburstyn,

The username should be in the domain\username
and the path should be = \\servername\sharefolder\

You probably need to give the ASP.NET impersonation account access to the registry keys mentioned in the KB article (below). You may want to set the permission for the parent key of the one listed, which is "AspNetProcess" and take ownership of it (Advanced button when setting permissions).
How To Manually Configure ASPNET Impersonation for ACT! Premium for Web: http://kb.sagesoftwareonline.com/app/answers/detail/a_id/14867

Are you getting any Server Error in '/APFW' Application error messages?

-------------------------
Just a note, when you say,
The ports I have opened are:
25 53 80 88 110 123 135 143 389 443-445 993 995 1025 1723 3268 4343 4443
I hope these ports are not opened inbound...if they are there is no reason to have a firewall as it is rendered almost useless security-wise unless you are specifying the destinations for these ports for the Exchange Server, etc. If this is outbound filtering that would make more sense, but otherwise I'd close up all of that except for your Exchange Server (and limit that destination to the Server IP only) for ports 135 & 443 (http://technet.microsoft.com/en-us/library/bb331973%28v=EXCHG.141%29.aspx) and whatever else must be opened.

Cheers!
0
 

Author Comment

by:saburstyn
ID: 39630284
First thanks for waiting, so much other stuff to do.
I attempted the use the aspnet_setreg -k:Software\AspNetProcess -u: ....  and received "aspnet_setreg is not recognized".  Checked on this and saw something about this command not running on a Domain Controller which my 2003 SMB is.  Still confused on how to proceed.  ( your link to sage is broken )

I was able to change the permissions in the registry for that key, but that didn't help anything.

As for the firewall, yes these ports all forward to the server and I am aware I have to many open.  First allow the guy to work then cleanup the mess.

Thanks again and any more insight would be appreciated.

Steven
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Suggested Solutions

Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now