Re: User Permissions on Windows Server 2003

Dan Palley

Delphi Developer

Re: User Permissions on Windows Server 2003

2006-10-04 12:37:18 AM
delphi47
Ok, what account is the Firebird service running under? It sounds like a
permissions problem locally.
Dan
"Gary Mrenak" <XXXX@XXXXX.COM>writes

Quote

I misunderstood your advice. My actual connection string does not include a
share .. it is the full path on the server.

Thanks.

Dan Palley writes:
>For interbase, all access to the database needs to be routed through the
>database server process. Typically, you would specify the servername, a
>colon, and then the local path to the database, i.e.
>myserver:c:\mydatabase.ib. I assume Firebird works the same way.
>
>If you connect via a share, then your locally installed copy of
>Interbase/Firebird is actually connecting to the database file on the
>remote server and you will have corruption as a result.
>
>Dan
>
>"Gary Mrenak" <XXXX@XXXXX.COM>writes
>news:45214ed1$XXXX@XXXXX.COM...
>
>>So you're saying that the database should never be located in a "share?"
>>If the db's directory happens to be located in the middle of stuff that
>>has been "shared" maybe I can un-share the db's directory. I wonder if
>>that will provide the same result?
>>
>>If not, would you recommend moving the db out of the share?
>>
>>Gary
>>
>>Dan Palley writes:
>>
>>>Are you connecting to the database via a shared drive? that is a no-no.
>>>The client shouldn't need any permissions on the server.
>>>
>>>Dan
>>>
>>>"Gary Mrenak" <XXXX@XXXXX.COM>writes
>>>news:XXXX@XXXXX.COM...
>>>
>>>
>>>>I think I found the answer to my particular problem: setting the
>>>>user's permissions for the Firebird install directory to Read &
>>>>Execute, List Folder Contents, Read, and Write.
>>>>
>>>>G
>>>>
>>>>Gary Mrenak writes:
>>>>
>>>>
>>>>>I'm trying to set the lowest user permissions necessary to run a
>>>>>Delphi application interacting with Firebird on a Win 2003 server.
>>>>>Administrator's privileges work fine, of course, but I can not quite
>>>>>figure out how to do it with less.
>>>>>
>>>>>Gary
>>>>>
>>>
>>>
>
>
>

Gary Mrenak

Delphi Developer

2006-10-04 08:08:59 AM

Re: User Permissions on Windows Server 2003

I'm new to Win2k3 so please excuse this basic question: when you say
"..account .. the Firbird service [is] running under?", I am not sure
what you mean. Firebird was installed on the server by an administrator.
Does it have an "account?" How would I determine this?
Gary
Dan Palley writes:

Quote

Ok, what account is the Firebird service running under? It sounds like a
permissions problem locally.

Dan

"Gary Mrenak" <XXXX@XXXXX.COM>writes
news:45217c88$XXXX@XXXXX.COM...

>I misunderstood your advice. My actual connection string does not include a
>share .. it is the full path on the server.
>
>Thanks.
>
>Dan Palley writes:
>
>>For interbase, all access to the database needs to be routed through the
>>database server process. Typically, you would specify the servername, a
>>colon, and then the local path to the database, i.e.
>>myserver:c:\mydatabase.ib. I assume Firebird works the same way.
>>
>>If you connect via a share, then your locally installed copy of
>>Interbase/Firebird is actually connecting to the database file on the
>>remote server and you will have corruption as a result.
>>
>>Dan
>>
>>"Gary Mrenak" <XXXX@XXXXX.COM>writes
>>news:45214ed1$XXXX@XXXXX.COM...
>>
>>
>>>So you're saying that the database should never be located in a "share?"
>>>If the db's directory happens to be located in the middle of stuff that
>>>has been "shared" maybe I can un-share the db's directory. I wonder if
>>>that will provide the same result?
>>>
>>>If not, would you recommend moving the db out of the share?
>>>
>>>Gary
>>>
>>>Dan Palley writes:
>>>
>>>
>>>>Are you connecting to the database via a shared drive? that is a no-no.
>>>>The client shouldn't need any permissions on the server.
>>>>
>>>>Dan
>>>>
>>>>"Gary Mrenak" <XXXX@XXXXX.COM>writes
>>>>news:XXXX@XXXXX.COM...
>>>>
>>>>
>>>>
>>>>>I think I found the answer to my particular problem: setting the
>>>>>user's permissions for the Firebird install directory to Read &
>>>>>Execute, List Folder Contents, Read, and Write.
>>>>>
>>>>>G
>>>>>
>>>>>Gary Mrenak writes:
>>>>>
>>>>>
>>>>>
>>>>>>I'm trying to set the lowest user permissions necessary to run a
>>>>>>Delphi application interacting with Firebird on a Win 2003 server.
>>>>>>Administrator's privileges work fine, of course, but I can not quite
>>>>>>figure out how to do it with less.
>>>>>>
>>>>>>Gary
>>>>>>
>>>>>>
>>>>
>>
>>

Dan Palley

Delphi Developer

2006-10-05 03:26:14 AM

Re: User Permissions on Windows Server 2003

If you look at the Firebird service on the server, you will see how it is set
up as far as what account it runs under. The default is to use the local
system account, which should have full access to the server resources, but
it's possible to use another account. Whatever account is used, you need
to make sure that the account has the correct permissions for the firebird
folder and the folders where the databases are located.
All of these settings are only done on the server. The client permissions
for workstations connecting to Firebird should not be an issue.
Dan
"Gary Mrenak" <XXXX@XXXXX.COM>writes

Quote

I'm new to Win2k3 so please excuse this basic question: when you say
"..account .. the Firbird service [is] running under?", I am not sure what
you mean. Firebird was installed on the server by an administrator. Does
it have an "account?" How would I determine this?

Gary

Dan Palley writes:
>Ok, what account is the Firebird service running under? It sounds like a
>permissions problem locally.
>
>Dan
>
>"Gary Mrenak" <XXXX@XXXXX.COM>writes
>news:45217c88$XXXX@XXXXX.COM...
>
>>I misunderstood your advice. My actual connection string does not
>>include a share .. it is the full path on the server.
>>
>>Thanks.
>>
>>Dan Palley writes:
>>
>>>For interbase, all access to the database needs to be routed through
>>>the database server process. Typically, you would specify the
>>>servername, a colon, and then the local path to the database, i.e.
>>>myserver:c:\mydatabase.ib. I assume Firebird works the same way.
>>>
>>>If you connect via a share, then your locally installed copy of
>>>Interbase/Firebird is actually connecting to the database file on the
>>>remote server and you will have corruption as a result.
>>>
>>>Dan
>>>
>>>"Gary Mrenak" <XXXX@XXXXX.COM>writes
>>>news:45214ed1$XXXX@XXXXX.COM...
>>>
>>>
>>>>So you're saying that the database should never be located in a
>>>>"share?" If the db's directory happens to be located in the middle of
>>>>stuff that has been "shared" maybe I can un-share the db's directory.
>>>>I wonder if that will provide the same result?
>>>>
>>>>If not, would you recommend moving the db out of the share?
>>>>
>>>>Gary
>>>>
>>>>Dan Palley writes:
>>>>
>>>>
>>>>>Are you connecting to the database via a shared drive? that is a
>>>>>no-no. The client shouldn't need any permissions on the server.
>>>>>
>>>>>Dan
>>>>>
>>>>>"Gary Mrenak" <XXXX@XXXXX.COM>writes
>>>>>news:XXXX@XXXXX.COM...
>>>>>
>>>>>
>>>>>
>>>>>>I think I found the answer to my particular problem: setting the
>>>>>>user's permissions for the Firebird install directory to Read &
>>>>>>Execute, List Folder Contents, Read, and Write.
>>>>>>
>>>>>>G
>>>>>>
>>>>>>Gary Mrenak writes:
>>>>>>
>>>>>>
>>>>>>
>>>>>>>I'm trying to set the lowest user permissions necessary to run a
>>>>>>>Delphi application interacting with Firebird on a Win 2003 server.
>>>>>>>Administrator's privileges work fine, of course, but I can not quite
>>>>>>>figure out how to do it with less.
>>>>>>>
>>>>>>>Gary
>>>>>>>
>>>>>>>
>>>>>
>>>
>>>
>
>
>

Gary Mrenak

Delphi Developer

2006-10-05 03:57:34 AM

Re: User Permissions on Windows Server 2003

Ok...got it! Thanks very much.
Gary
Dan Palley writes:

Quote

If you look at the Firebird service on the server, you will see how it is set
up as far as what account it runs under. The default is to use the local
system account, which should have full access to the server resources, but
it's possible to use another account. Whatever account is used, you need
to make sure that the account has the correct permissions for the firebird
folder and the folders where the databases are located.

All of these settings are only done on the server. The client permissions
for workstations connecting to Firebird should not be an issue.

Dan

"Gary Mrenak" <XXXX@XXXXX.COM>writes
news:4522fc30$XXXX@XXXXX.COM...

>I'm new to Win2k3 so please excuse this basic question: when you say
>"..account .. the Firbird service [is] running under?", I am not sure what
>you mean. Firebird was installed on the server by an administrator. Does
>it have an "account?" How would I determine this?
>
>Gary
>
>Dan Palley writes:
>
>>Ok, what account is the Firebird service running under? It sounds like a
>>permissions problem locally.
>>
>>Dan
>>
>>"Gary Mrenak" <XXXX@XXXXX.COM>writes
>>news:45217c88$XXXX@XXXXX.COM...
>>
>>
>>>I misunderstood your advice. My actual connection string does not
>>>include a share .. it is the full path on the server.
>>>
>>>Thanks.
>>>
>>>Dan Palley writes:
>>>
>>>
>>>>For interbase, all access to the database needs to be routed through
>>>>the database server process. Typically, you would specify the
>>>>servername, a colon, and then the local path to the database, i.e.
>>>>myserver:c:\mydatabase.ib. I assume Firebird works the same way.
>>>>
>>>>If you connect via a share, then your locally installed copy of
>>>>Interbase/Firebird is actually connecting to the database file on the
>>>>remote server and you will have corruption as a result.
>>>>
>>>>Dan
>>>>
>>>>"Gary Mrenak" <XXXX@XXXXX.COM>writes
>>>>news:45214ed1$XXXX@XXXXX.COM...
>>>>
>>>>
>>>>
>>>>>So you're saying that the database should never be located in a
>>>>>"share?" If the db's directory happens to be located in the middle of
>>>>>stuff that has been "shared" maybe I can un-share the db's directory.
>>>>>I wonder if that will provide the same result?
>>>>>
>>>>>If not, would you recommend moving the db out of the share?
>>>>>
>>>>>Gary
>>>>>
>>>>>Dan Palley writes:
>>>>>
>>>>>
>>>>>
>>>>>>Are you connecting to the database via a shared drive? that is a
>>>>>>no-no. The client shouldn't need any permissions on the server.
>>>>>>
>>>>>>Dan
>>>>>>
>>>>>>"Gary Mrenak" <XXXX@XXXXX.COM>writes
>>>>>>news:XXXX@XXXXX.COM...
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>>I think I found the answer to my particular problem: setting the
>>>>>>>user's permissions for the Firebird install directory to Read &
>>>>>>>Execute, List Folder Contents, Read, and Write.
>>>>>>>
>>>>>>>G
>>>>>>>
>>>>>>>Gary Mrenak writes:
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>>I'm trying to set the lowest user permissions necessary to run a
>>>>>>>>Delphi application interacting with Firebird on a Win 2003 server.
>>>>>>>>Administrator's privileges work fine, of course, but I can not quite
>>>>>>>>figure out how to do it with less.
>>>>>>>>
>>>>>>>>Gary
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>
>>
>>