This forum has been moved here:
Helicon Tech Community Forum

ISAPI_Rewrite 3.0 (Forum Locked Forum Locked)
 Helicon Tech : ISAPI_Rewrite 3.0
Subject Topic: isapi filter not working on some domains
Author
Message |
netmagic
Newbie


Joined: 07 November 2011
Location: United States
Posts: 6
Posted: 11 November 2011 at 1:26pm

Windows 2003 Server IIS 6.0 and Plesk CP. isapi rewrite 3 installed and working on most domains. But, I have a couple of domains on which it isn't working. On those domains that aren't working the isapi filter php5isapi has no up arrow status.

I've checked plesk for the domain and php is 5.2.6 running as isapi extension same as domains that are working.

The rewrite rule I have is below. Anyone point me to why isapi filter is not up on a domain?

# Helicon ISAPI_Rewrite configuration file
# Version 3.1.0.78

RewriteEngine on
RewriteRule .? - [F]
Back to Top Visit netmagic's Homepage
 
Guests
Guest


Joined: 01 October 2003
Online Status: Online
Posts: -160
Posted: 16 November 2011 at 7:17am

Hello,

The most common issue with PLESK is described in following documentation.
Do you install ISAPI_Rewrite manually for each web-site?

Regards
Andrew
Back to Top
 
netmagic
Newbie


Joined: 07 November 2011
Location: United States
Posts: 6
Posted: 06 December 2011 at 8:05am

Sorry for the long delay. Other priorities...  Thank you for the reply.

We looked at the folder security settings.
Helicon folder had psacln set to DENY for everything. This was inherited from the parent C drive permissions.
The psaserv user isn't even listed.

We removed the inherited properties for psacln on the Helicon folder. This caused the psacln user to be removed from the list of users on the Helicon folder and of course the ISAPI_Rewrite3 subfolder.

At this point I could even click into the Helicon folder. Access was denied. I had to add the Administrators user back onto the Helicon folder in order to view it.

Should we add psacln back on the Helicon folder? And the psaserv user? What permissions do they require?

One more question.
The C drive has the psacln user set to DENY Full Control on Subfolders and Files only. DO I need to change this? Will it prevent the psacln user from getting access to the Helicon/ISAPI_Rewrite3 subfolder?


Edited by netmagic - 06 December 2011 at 8:10am
Back to Top Visit netmagic's Homepage
 
Guests
Guest


Joined: 01 October 2003
Online Status: Online
Posts: -160
Posted: 07 December 2011 at 4:20am

Simply delete psaserv (and there's must be another user reffering to PLESK) for helicon folder.
This must solve the issue, and it won't harm your security by any means.

Regards
Andrew
Back to Top
 
netmagic
Newbie


Joined: 07 November 2011
Location: United States
Posts: 6
Posted: 07 December 2011 at 8:05am

My previous post stated that psaserv isn't listed in the Users list for the Helicon folder.
Our issue seems to be with IIS not with plesk. Unless plesk controls the IIS configuration.

In IIS MMC > domainname > Properties > Isapi Filters tab
php5isapi is listed
But there is no green up arrow to show it is working.

Some domains have the green up arrow, others do not.

Shouldn't the isapi filter be active on all domains?
Back to Top Visit netmagic's Homepage
 
Guests
Guest


Joined: 01 October 2003
Online Status: Online
Posts: -160
Posted: 08 December 2011 at 8:02am

Here's an article about how ISAPI_rewrite filder should be and
should NOT be installed.

Regards
Andrew
Back to Top
 
netmagic
Newbie


Joined: 07 November 2011
Location: United States
Posts: 6
Posted: 08 December 2011 at 9:34am

Thank you. I very much appreciate your help.

We confirmed our configuration is Global and it appears to be correct.

The Web Sites ISAPI filter screen shot is here.
A specific domain is here.

But, the actual entries in the metabase.xml are:

<IIsFilters    Location ="/LM/W3SVC/1/Filters"
        AdminACL="496344...ae87b"
        FilterLoadOrder=""
    >
</IIsFilters>


<IIsFilter    Location ="/LM/W3SVC/29386/Filters/ISAPI_Rewrite3"
        FilterPath="C:\Program Files\Helicon\ISAPI_Rewrite3\ISAPI_Rewrite.dll"
    >
</IIsFilter>

<IIsFilter    Location ="/LM/W3SVC/Filters/ISAPI_Rewrite3"
        FilterDescription="ISAPI_Rewrite v3.0"
        FilterFlags="NotifyPreProcHeaders | NotifyUrlMap | NotifySendResponse | NotifyLog | NotifyEndOfNetSession | NotifyOrderHigh | NotifyAuthComplete"
        FilterPath="C:\Helicon\ISAPI_Rewrite3\ISAPI_Rewrite.dll"
        FilterState="1"
    >
</IIsFilter>

Does this mean we do have a double registration?

I started this troubleshooting by looking at why some sites have the php5isapi filter status Up and other have no status.

In reviewing the metabase.xml sites the sites that show php5isapi Up have the following entries:
<IIsFilters    Location ="/LM/W3SVC/1080/Filters"
        FilterLoadOrder=",php5isapi"
    >
</IIsFilters>

The sites with no status for php5isapi have the following:
<IIsFilters    Location ="/LM/W3SVC/1080/Filters"
        FilterLoadOrder="php5isapi"
    >
</IIsFilters>

Note the missing comma in the FilterLoadOrder value. I was going to manually edit the metabase.xml for one of the non-status domains and see if this corrects the issue.
Back to Top Visit netmagic's Homepage
 
Guests
Guest


Joined: 01 October 2003
Online Status: Online
Posts: -160
Posted: 09 December 2011 at 4:55am

Well, the following entry shouldn't be there:
Quote:
<IIsFilter    Location ="/LM/W3SVC/29386/Filters/ISAPI_Rewrite3"
        FilterPath="C:\Program Files\Helicon\ISAPI_Rewrite3\ISAPI_Rewrite.dll"
    >
</IIsFilter>


It's a good idea to analyze the site IDs like 1080 to understand the .xml mess and edit it. Then you can take other IDs and see what the have in metabase.
Please, keep me posted.

Regards
Andrew

Back to Top
 
netmagic
Newbie


Joined: 07 November 2011
Location: United States
Posts: 6
Posted: 09 December 2011 at 10:03am

I will edit the metabase.xml to remove the offending 4 rows.

Am I assuming correctly that your statement regarding 1080 refers to my question about the comma in the FilterLoadOrder?

Below is the metabase.xml rows for one ID for which the php5isapi filter has an UP status. If I understand, I should go through all other IDs and add the comma for the ones where there is no status.

<IIsWebServer    Location ="/LM/W3SVC/1080"
        LogExtFileFlags="LogExtFileDate | LogExtFileHost | LogExtFileTime | LogExtFileClientIp | LogExtFileUserName | LogExtFileSiteName | LogExtFileComputerName | LogExtFileServerIp | LogExtFileMethod | LogExtFileUriStem | LogExtFileUriQuery | LogExtFileHttpStatus | LogExtFileWin32Status | LogExtFileBytesSent | LogExtFileBytesRecv | LogExtFileTimeTaken | LogExtFileServerPort | LogExtFileUserAgent | LogExtFileCookie | LogExtFileReferer | LogExtFileProtocolVersion | LogExtFileHttpSubStatus"
        LogFileDirectory="C:\inetpub\vhosts\domainname.com\statistics\logs"
        LogPluginClsid="{FF160663-DE82-11CF-BC0A-00AA006111E0}"
        ServerAutoStart="TRUE"
        ServerBindings="xx.xx.xx.xx:80:domainname.com
            xx.xx.xx.xx:80:www.domainname.com"
        ServerComment="domainname.com"
    >
</IIsWebServer>
<IIsFilters    Location ="/LM/W3SVC/1080/Filters"
        FilterLoadOrder=",php5isapi"
    >
</IIsFilters>
<IIsFilter    Location ="/LM/W3SVC/1080/Filters/php5isapi"
        FilterDescription="php5isapi"
        FilterEnableCache="TRUE"
        FilterEnabled="TRUE"
        FilterPath="C:\Program Files\SWsoft\Plesk\Additional\PleskPHP5\php5isapi.dll"
        FilterState="1"
    >
</IIsFilter>
<IIsWebVirtualDir    Location ="/LM/W3SVC/1080/ROOT"
        AccessFlags="AccessRead | AccessScript"
        AnonymousPasswordSync="FALSE"
        AnonymousUserName="IUSR_domainname"
        AnonymousUserPass="496344625800000010000000400000004e17bc7a05131e68079b7bd5bac3ba5a61ad585230f4adc721d3e6868581b389328bc9c06e678f2f10245ced29edd270b1751b965a7c428ade5ecca50f4d4a3db19e2de5a2d33f828e7a5c01436a58d5"
        AppFriendlyName="domainname.com"
        AppIsolated="0"
        AppPoolId="domainname.com(domain)(pool)"
        AppRoot="/LM/W3SVC/1080/Root"
        AuthFlags="AuthAnonymous | AuthNTLM"
        DefaultDoc="at_domains_index.html,Index.html,Index.htm,Index.cfm,Index.shtml,Index.shtm,Index.stm,Index.php,Index.php3,Index.asp,Index.aspx,Default.htm,Default.asp,Default.aspx"
        DirBrowseFlags="DirBrowseShowDate | DirBrowseShowTime | DirBrowseShowSize | DirBrowseShowExtension | DirBrowseShowLongDate | EnableDefaultDoc"
        HttpCustomHeaders="X-Powered-By: PleskWin
            X-Powered-By: ASP.NET"
        HttpErrors="400,*,File,C:\inetpub\vhosts\domainname.com\error_docs\bad_request.html
            401,1,File,C:\inetpub\vhosts\domainname.com\error_docs\unauthorized.html
            401,2,File,C:\inetpub\vhosts\domainname.com\error_docs\unauthorized.html
            401,3,File,C:\inetpub\vhosts\domainname.com\error_docs\unauthorized.html
            401,4,File,C:\inetpub\vhosts\domainname.com\error_docs\unauthorized.html
            401,5,File,C:\inetpub\vhosts\domainname.com\error_docs\unauthorized.html
            401,7,File,C:\inetpub\vhosts\domainname.com\error_docs\unauthorized.html
            403,1,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,2,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,3,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,4,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,5,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,6,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,7,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,8,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,9,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,10,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,11,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,12,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,13,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,14,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,15,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,16,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,17,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,18,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,19,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            403,20,File,C:\inetpub\vhosts\domainname.com\error_docs\forbidden.html
            404,*,File,C:\inetpub\vhosts\domainname.com\error_docs\not_found.html
            404,2,File,C:\inetpub\vhosts\domainname.com\error_docs\not_found.html
            404,3,File,C:\inetpub\vhosts\domainname.com\error_docs\not_found.html
            405,*,File,C:\inetpub\vhosts\domainname.com\error_docs\method_not_allowed.html
            406,*,File,C:\inetpub\vhosts\domainname.com\error_docs\not_acceptable.html
            407,*,File,C:\inetpub\vhosts\domainname.com\error_docs\proxy_authentication_required.html
            412,*,File,C:\inetpub\vhosts\domainname.com\error_docs\precondition_failed.html
            414,*,File,C:\inetpub\vhosts\domainname.com\error_docs\request-uri_too_long.html
            415,*,File,C:\inetpub\vhosts\domainname.com\error_docs\unsupported_media_type.html
            500,*,File,C:\inetpub\vhosts\domainname.com\error_docs\internal_server_error.html
            500,12,File,C:\inetpub\vhosts\domainname.com\error_docs\internal_server_error.html
            500,13,File,C:\inetpub\vhosts\domainname.com\error_docs\internal_server_error.html
            500,15,File,C:\inetpub\vhosts\domainname.com\error_docs\internal_server_error.html
            500,16,File,C:\inetpub\vhosts\domainname.com\error_docs\internal_server_error.html
            500,17,File,C:\inetpub\vhosts\domainname.com\error_docs\internal_server_error.html
            500,18,File,C:\inetpub\vhosts\domainname.com\error_docs\internal_server_error.html
            500,19,File,C:\inetpub\vhosts\domainname.com\error_docs\internal_server_error.html
            500,100,File,C:\inetpub\vhosts\domainname.com\error_docs\internal_server_error.html
            501,*,File,C:\inetpub\vhosts\domainname.com\error_docs\not_implemented.html
            502,*,File,C:\inetpub\vhosts\domainname.com\error_docs\bad_gateway.html"
        Path="C:\Inetpub\vhosts\domainname.com\httpdocs"
        ScriptMaps=".asp,C:\WINDOWS\system32\inetsrv\asp.dll,5,GET,HEAD,POST,TRACE
            .cer,C:\WINDOWS\system32\inetsrv\asp.dll,5,GET,HEAD,POST,TRACE
            .asa,C:\WINDOWS\system32\inetsrv\asp.dll,5,GET,HEAD,POST,TRACE
            .cdx,C:\WINDOWS\system32\inetsrv\asp.dll,5,GET,HEAD,POST,TRACE
            .shtm,C:\WINDOWS\system32\inetsrv\ssinc.dll,5,GET,POST
            .shtml,C:\WINDOWS\system32\inetsrv\ssinc.dll,5,GET,POST
            .stm,C:\WINDOWS\system32\inetsrv\ssinc.dll,5,GET,POST
            .htm,C:\WINDOWS\system32\inetsrv\ssinc.dll,5,GET,POST
            .html,C:\WINDOWS\system32\inetsrv\ssinc.dll,5,GET,POST
            .php,&quot;C:\Program Files\SWsoft\Plesk\Additional\PleskPHP5\php5isapi.dll&quot;,5
            .php3,&quot;C:\Program Files\SWsoft\Plesk\Additional\PleskPHP5\php5isapi.dll&quot;,5
            .phtml,&quot;C:\Program Files\SWsoft\Plesk\Additional\PleskPHP5\php5isapi.dll&quot;,5
            .cgi,&quot;C:\Program Files\SWsoft\Plesk\Additional\Perl\bin\perl.exe&quot; &quot;%s&quot; %s,5,GET,HEAD,POST
            .pl,&quot;C:\Program Files\SWsoft\Plesk\Additional\Perl\bin\perl.exe&quot; &quot;%s&quot; %s,5,GET,HEAD,POST
            .plx,&quot;C:\Program Files\SWsoft\Plesk\Additional\Perl\bin\perlis.dll&quot;,5,GET,HEAD,POST
            .py,&quot;C:\Program Files\SWsoft\Plesk\Additional\Python\python.exe&quot; -u &quot;%s&quot; %s,5
            .idc,C:\WINDOWS\system32\inetsrv\httpodbc.dll,5,GET,POST
            .rwhlp,C:\Program Files\Helicon\ISAPI_Rewrite3\ISAPI_RewriteProxy.dll,1"
    >
</IIsWebVirtualDir>
<IIsWebDirectory    Location ="/LM/W3SVC/1080/ROOT/aspnet_client"
        AccessFlags="AccessRead"
        DirBrowseFlags="0"
    >
</IIsWebDirectory>
<IIsWebVirtualDir    Location ="/LM/W3SVC/1080/ROOT/cgi-bin"
        AccessFlags="AccessExecute | AccessRead | AccessScript"
        Path="C:\Inetpub\vhosts\domainname.com\cgi-bin"
    >
</IIsWebVirtualDir>
<IIsWebVirtualDir    Location ="/LM/W3SVC/1080/ROOT/jakarta"
        AccessFlags="AccessExecute | AccessRead | AccessScript"
        Path="C:\Program Files\SWsoft\Plesk\isapi"
    >
</IIsWebVirtualDir>
<IIsWebVirtualDir    Location ="/LM/W3SVC/1080/ROOT/plesk-stat"
        AccessFlags="AccessRead | AccessScript"
        Path="C:\Inetpub\vhosts\domainname.com\statistics"
    >
</IIsWebVirtualDir>
<IIsWebVirtualDir    Location ="/LM/W3SVC/1080/ROOT/sitepreview"
        AccessFlags="AccessExecute | AccessRead | AccessScript"
        Path="C:\Program Files\SWsoft\Plesk\isapi"
    >
</IIsWebVirtualDir>
<IIsWebVirtualDir    Location ="/LM/W3SVC/1080/ROOT/test"
        AuthFlags="AuthBasic"
        Path="C:\Inetpub\vhosts\domainname.com\httpdocs\test"
    >
</IIsWebVirtualDir>
Back to Top Visit netmagic's Homepage
 
Guests
Guest


Joined: 01 October 2003
Online Status: Online
Posts: -160
Posted: 12 December 2011 at 4:23am

What would be very good - to uninstall ISAPI_Rewrite and install in clean and fresh. This must fix your issue.

Regards
Andrew
Back to Top
 

Sorry, you can NOT post a reply.
This forum has been locked by a forum administrator.

Printable version Printable version