Solved

ACT! Premier for Web not allowing logon

Posted on 2013-11-04
2
1,338 Views
Last Modified: 2013-12-04
I am working with a friend who has a 2003 SMB server running RRAS, Exchange and ACT!.  Circumstance required me to reset the netgear router.  I lost the original config with the open ports.

The ports I have opened are:
25 53 80 88 110 123 135 143 389 443-445 993 995 1025 1723 3268 4343 4443

Now when a remote user attempts to logon to ACT! via the web they receive the following error:

Configuration Error

Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

Parser Error Message: Could not create Windows user token from the credentials specified in the config file. Error from the operating system 'Logon failure: unknown user name or bad password.
'

Source Error:


Line 73:   <system.web>
Line 74:     <httpRuntime executionTimeout="1200" maxRequestLength="102400" />
Line 75:     <identity impersonate="true" userName="registry:HKLM\Software\AspNetProcess\ASPNET_SETREG,userName" password="registry:HKLM\Software\AspNetProcess\ASPNET_SETREG,password" />
Line 76:     <pages enableViewState="true" enableSessionState="true" theme="ACT" autoEventWireup="false" validateRequest="false" enableEventValidation="false">
Line 77:       <controls>

Source File: E:\ACT\Act for Web\APFW\web.config    Line: 75

I don't believe it is the web.config file since it has not changed since 2010.  

Thanks in advance for you assistance.

Steven
0
Comment
Question by:saburstyn
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 25

Accepted Solution

by:
Blue Street Tech earned 500 total points
ID: 39621975
Hi saburstyn,

The username should be in the domain\username
and the path should be = \\servername\sharefolder\

You probably need to give the ASP.NET impersonation account access to the registry keys mentioned in the KB article (below). You may want to set the permission for the parent key of the one listed, which is "AspNetProcess" and take ownership of it (Advanced button when setting permissions).
How To Manually Configure ASPNET Impersonation for ACT! Premium for Web: http://kb.sagesoftwareonline.com/app/answers/detail/a_id/14867

Are you getting any Server Error in '/APFW' Application error messages?

-------------------------
Just a note, when you say,
The ports I have opened are:
25 53 80 88 110 123 135 143 389 443-445 993 995 1025 1723 3268 4343 4443
I hope these ports are not opened inbound...if they are there is no reason to have a firewall as it is rendered almost useless security-wise unless you are specifying the destinations for these ports for the Exchange Server, etc. If this is outbound filtering that would make more sense, but otherwise I'd close up all of that except for your Exchange Server (and limit that destination to the Server IP only) for ports 135 & 443 (http://technet.microsoft.com/en-us/library/bb331973%28v=EXCHG.141%29.aspx) and whatever else must be opened.

Cheers!
0
 

Author Comment

by:saburstyn
ID: 39630284
First thanks for waiting, so much other stuff to do.
I attempted the use the aspnet_setreg -k:Software\AspNetProcess -u: ....  and received "aspnet_setreg is not recognized".  Checked on this and saw something about this command not running on a Domain Controller which my 2003 SMB is.  Still confused on how to proceed.  ( your link to sage is broken )

I was able to change the permissions in the registry for that key, but that didn't help anything.

As for the firewall, yes these ports all forward to the server and I am aware I have to many open.  First allow the guy to work then cleanup the mess.

Thanks again and any more insight would be appreciated.

Steven
0

Featured Post

Veeam gives away 10 full conference passes

Veeam is a VMworld 2017 US & Europe Platinum Sponsor. Enter the raffle to get the full conference pass. Pass includes the admission to all general and breakout sessions, VMware Hands-On Labs, Solutions Exchange, exclusive giveaways and the great VMworld Customer Appreciation Part

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Suggested Courses

635 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question