Why should we trust the web app pool account for delegation?

Hello,
Can someone explain to me why we must trust the web app pool account for delegation in AD?
here's what I understood:
{Client computer} {Web server}
{SQL Server}
domain\user1 ---auth. on web portal ----> [web portal]-domain\appPool-> the appPool account takes the identity of user1
correct ?
Thanks !

To enable the MBAM Servers to authenticate communication from the Administration and Monitoring Website and the Self-Service Portal,
you must register a Service Principal Name (SPN) for the host name under the domain account that you are using for the web application pool. More via https://technet.microsoft.com/en-us/library/dn645356.aspx?
Eswar Koneti | Configmgr Blog: www.eskonr.com | Linkedin: Eswar Koneti
| Twitter: eskonr

Similar Messages

HT5012 Why should I click the accept button for a server certificate at every initial time although it is listed as a trusted root CA on iOS6?

I'm now using a root CA which was listed above.
But when I try to connect WLAN via EAP with RADIUS initially, I should click the accept button for the certificate of the RADIUS Server.
Why should it work?

Hi,
I'm still looking for the reason.
Isn't there any way which can avoid the verification for a public certificate of authentication server using EAP-TLS.
Why should I click the accept button in initial step for authenticating with RADIUS server using EAP-TLS although the root CA of the server certificate is listed in the default trusted CA on iOS?

Office Web Apps - Best Practice for App Pool Security Account?

Guys,
I am finalising my testing of Office Web Apps, and ready to move onto deploying it to my live farm.
Generally speaking, I put service applications in their own application pool.
Obviously by doing so this has an overhead on memory and processing, however generally speaking it is best practice from a security perspective when using separate accounts.
I have to create 3 new service applications in order to deploy Office Web Apps, in my test environment these are using the Default SharePoint app pool.
Should I create one application pool for all my office web apps with a fresh service account, or does it make no odds from a security perspective to run them in the default app pool?
Cheers,
Conrad
Conrad Goodman MCITP SA / MCTS: WSS3.0 + MOSS2007

i run my OWA under it's own service account (spOWA) and use only one app pool. Just remember that if you go this route, "When
you create a new application pool, you can specify a security account used by the application pool to be either a predefined Network Service account or a managed account. The account must have db_datareader, db_datawriter, and execute permissions for the content
databases and the SharePoint configuration database, and be assigned to the db_owner role for the content databases." (http://technet.microsoft.com/en-us/library/ff431687.aspx)

Mapping of Web App context root and the physical directory of the web app

I'm running Weblogic 7.0 on Windows2000.The physical directory of my web application
is D:\WL8\weblogic81\TestDeploy\build\TestWebApp and under these directory I have
my JSPS, static HTML and WEB-INF. I define the context path of this web app in
the weblogic.xml ;-
<weblogic-web-app>
<context-root>/testapp</context-root>
</weblogic-web-app>
As a result of deploying this web app in the server (or it may be created manually
also), the following entry gets inserted in the server's config.xml ,-
<Application Deployed="true" Name="TestWebApp"
Path="D:\WL8\weblogic81\TestDeploy\build" TwoPhase="true">
<WebAppComponent Name="TestWebApp" Targets="myserver" URI="TestWebApp"/>
</Application>
Now, whenever I make a request of the form "http://localhost:7001/testapp/..",
it's properly executing my web app. My question is, how does the container knows
that for any request for the web app with context path as 'testapp', it has to
server files from D:\WL8\weblogic81\TestDeploy\build\TestWebApp. In the above
process, nowhere such mapping is specified. I expected something like Tomcat's
server.xml, where in docbase we clearly specify this mapping between the context
path and the physical directory. Please help.

Let me give some more details and hopefully this will make things clearer.
Say you deploy /foo/bar/myweb.war and in myweb.war you configure a
context-root of /rob
During deployment, the server creates an ApplicationMBean with a path of
/foo/bar/. It then creates a WebAppComponent with a uri of myweb.war.
Next, deployment calls back on the web container and tells it to deploy
the WebAppComponent. The web container reads the myweb.war, parses
descriptors etc. The web container then updates its data structures to
register that myweb.war has a context path of /rob. (It has to figure
out all the other servlet mappings as well.)
When a request for /rob/foo comes in, the web container consults its
data structures to determine which webapp and servlet receives the
request. This is not a linear search of all webapps and servlets.
There's much better ways to do pattern matching.
Hope this clears things up. Let me know if you still have questions.
-- Rob
Arindam Chandra wrote:
Thanks for the answer. Still one thing is not clear. Whatever context path I declare
for my web app as the value of <context-root> element in the weblogic.xml (in
my example it's "/testapp"), it is no where mapped with the "URI" attribute (or
any other attribute, sub-element whatsoever in the <Application> element).
Application Deployed="true" Name="TestWebApp"
Path="D:\WL8\weblogic81\TestDeploy\build" TwoPhase="true">
<WebAppComponent Name="TestWebApp" Targets="myserver" URI="TestWebApp"/>
</Application>
So when a request of the form http://myweblogic.com:7001/testapp/... arrives at
the server, how does the server knows that it has to serve this request with files
from D:\WL8\weblogic81\TestDeploy\build\TestWebApp ? It should not be like the
web container iterates thru all the web application entries in config.xml and
tries to match with one context-root declaration. I repeat, I expected some mapping
similar to Tomcat's server.xml, where in the <docbase> element u clearly specify
the mapping between the context path and the physical directory
Rob Woollen <[email protected]> wrote:
Arindam Chandra wrote:
I'm running Weblogic 7.0 on Windows2000.The physical directory of myweb application
is D:\WL8\weblogic81\TestDeploy\build\TestWebApp and under these directoryI have
my JSPS, static HTML and WEB-INF. I define the context path of thisweb app in
the weblogic.xml ;-
<weblogic-web-app>
<context-root>/testapp</context-root>
</weblogic-web-app>
As a result of deploying this web app in the server (or it may be createdmanually
also), the following entry gets inserted in the server's config.xml,-
<>So the server will look for your web application at the Application Path
(D:\WL8\weblogic81\TestDeploy\build|) + the web uri (TestWebApp). So
it
maps the context-root you've specified /testapp to that path.
It's a little clearer in the case where you had a full-fledged EAR.
Then you'r application path would map to the "root" of the EAR, and the
uris would point to the various modules (eg webapps.)
-- Rob
Now, whenever I make a request of the form "http://localhost:7001/testapp/..",
it's properly executing my web app. My question is, how does the containerknows
that for any request for the web app with context path as 'testapp',it has to
server files from D:\WL8\weblogic81\TestDeploy\build\TestWebApp. Inthe above
process, nowhere such mapping is specified. I expected something likeTomcat's
server.xml, where in docbase we clearly specify this mapping betweenthe context
path and the physical directory. Please help.

With the new ipad coming out soon, why should I buy the ipad 2?

with the new ipad coming out soon, why should I buy the ipad 2?

I can only echo what Pogo says about buying based on what it does today.
3 weeks ago I bought a Mac Mini. A new Mac Mini model has been rumoured to come out anywhere between the same week I made my purchase and the end of August. None's been released as yet.
I wanted one in the week of June that I bought mine so I bought it based on the fact that it did what I wanted and I couldn't imagine anything which could be added that I'd want - my MacBook Pro doesn't have Thunderbolt so the most likely addition isn't really going to be much use for me.
Basically you have to buy what you what based on what's out at the the time.
I can promise that within seconds of the iPad3 being released, the web will be full of rumours about the next one!

Why there is spaces between Web App module listings on a web page?

Why there is spaces between Web App module listings on a web page?
Here is the web page:
http://www.mazine.com/test/testpage.htm
And here is the CSS code:
http://www.mazine.com/test/css/tablestyle.css

I only used Photoshop for the layout. Then I created web-safe images for everything that I used for Dreamweaver. I uploaded the images to the internet and then image sourced them into the code so that they will be viewed properly in the correct circumstances. I haven't used HTML since about 2004 and I wasn't very good then. I've just been thrown back into it and I'm pretty much learning as I go. This is my second attempt because I wanted to make the newsletter more eye-catching. My first one is very basic and without a background image at all and that looks fine in pretty much all email clients. I tested it with Litmus. All except for Windows Live Mail, where the images didn't act as links but as static images. It works fine with the others I tested manually. Those being Gmail, Yahoo and AOL. I will try the display:block and get back to you. Thanks for your suggestions.

SQL Server 2008 on the Web/App server for BPC 7.0

In a multi-server environment (DB/OLAP on a 64-bit platform, Web/App on a 32-bit platform), is it necessary to have SQL Server on the Web/App server if Reporting Services is not used? Could you explain why SQL Server is needed on this server if Reporting Services is not used?

Hi
Reporting Service is a requirement for BPC. If it is not deployed on App Server, it can be deployed elsewhere but is required.
Other SQL related things that go on App Server include:
Reporting Services
Shared Features
       Client Tools Connectivity
       Management Tools - Complete
       Business Intelligence Development Studio
       Integration Services
       Client Tools Backward Compatibility
Microsoft SQL Server 2005 Backward Compatibility Components from Microsoft SQL Server 2008 Feature Pack
Reporting Services/Integration Service requires SQL license(s). Standard ediiton of these can be used if you are not performing Load Balanced deployement.
Regards
Shaam

Why should I ask the community?

Why should I ask the community, isn’t apple the one whom I should be getting help from?
I don’t need apple points or free staff, considering that I have to work to make my leaving. I don’t have the time or the aspiration for it. I just want to know “ Why iweb is limited on the web site dawn load” I understand if the web site has been designed with other software , but have no understanding otherwise and I can care less for some smart… telling me to do backups or to get told to start all over!!!
I since I don’t have all this time and I don’t wish to make all this time for communities, I just want understand if is time to stop buying apple products.
Oidige

Hi everybody first my apologies to the community members, It was not my intention to offend any of you or to criticize your genuine help!
I’m very disappointed with Apple’s business conduct and their assistance in my home town, after changing he back cover of my Mac book, it didn’t work anymore. I bought a new one and all my problems with iweb started. I went to different concessionaire but they had no solution for my problem. I won’t get in the details; I just cannot understand why the iweb software doesn’t have choice to dawn load sites creates with iweb! One again my excuses to the community!
Sincerely Oidige

Is it possible to create a BBS in the web app?

Is it possible to create a BBS in the web app?

BBS you mean Bulletin board?
You have a forums module in BC.

The web app input form is not holding what i enter in it

Am setting up a business directory using the web apps, and two of fields are custom, one for map and video, {tag_map embed} {tag_video embed}. Now when I add a business using the web app input form. All the other fields work perfect in the list and detail page, but in the detail page where the map and video tags are, they are empty, the form isn’t taking what I enter in the map and video field. I tried text (string) and text (multiline), no change. But when I add the business in the back end, it works. So it makes me think there is something wrong with the input form. I also try with the edit layout form once the business was added, that didn’t work too.
Any ideas what would be causing this to happen

Delete them from your library including files, the go to the iTunes Store and select "Purchased" from the Quick Links side bar on the right. Go through all the tabs to download again for free

Not using the most recent checked in version of the web app DLL in Release build

Hi folks
Got some peculiar behaviour - I have three build configurations set up within VS2K13 for Debug, Release and DebugOnLive.
There are some basic XML transformations to update emails, db-settings etc - all very simple and working.
Needed to do a DebugOnLive build to test an emergency fix and everything built fine. Tested on the pilot site, saw the fix was working and proceeded to rebuild for Release.
Everything seemed great except the web-app DLL with the fix in that was used for the release build was not the latest version even though the pilot build had used the latest version. I had to recheck in the DLL to get it to use the updated version!
Is this behaviour 'by design' - it seems peculiar you would have to re-check in to change the build if all you are doing is swapping some settings? You are fixed - all you are doing is building for a different configuration or am I misunderstanding?
mmacneill123 (MCP)

Hi Mmacneill123,
Thanks for your reply.
You said that “the issue is that I have already checked in the changes…”, and you said “if I check in before
EVERY build, everything works fine!” too.
You’re using the default build process template in your build definition? You configured these 3 configurations in your build definition to build your solution 3 times?
If you remove that DebugForLive configuration, only configure Debug and Release in your solution and build definition to perform build, everything will works fine?
After you changed the configuration from “DebugForLive” to Release, please check in on your solution first, then queue build definition to build your solution. After you changed the configuration each time, please check-in on your solution first,
then perform build.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Why are some of the new app free for some ppl and paid for some

why are some of the new app free for some ppl and paid for some?

People that purchase the iPhone 5s, and the 5c get Pages, Keynote, and Numbers for iOS for free. Also, any purchases of the new iPad models.
More info here: http://support.apple.com/kb/HT5913
HTH

Using SQL Server Reporting Services Standard edtion on the Web/App server

I would like some clarification of when is it a supported configuration to use SQL Reporting Services Standard Edtion with BPC 7.0M.
If you have a standard Multi-server installation with WEB/APP/RS/IS on one server and SQL/AS on the other server, is SQL Reporting service required to be Enterprise Edition? The v7.0M SP4 installation guide is a bit confusing on this because it says Reporting Services standard edition is supported, but then it says that SQL Enterprise Edition is required on the web/app server.
The Web/app would have SQL Management tools (edition-independent), Integration Services (edition-independent) and Reporting Services (Standard is allowed?) - so that would seem to mean that you can have SQL Standard edition on the front-end Web/App server.
Please advise as to what we need to tell customers going forward.
thanks,
Tony DeStefanis

Hi Tony,
SQL Server SE is supported for web/application server but you have limitation.
If you need multiple application server then RS has to be installed into a web farm and in thta case SE can not be installed it is required EE.
But if you have just one application server SQL server SE can be used without any problem.
More than that RS can be a complete separate server it is not necessary to be in any of SAP BPC server (web/application or database server) so in that case again you can use SE without any problem.
EE is required just when you need high availability and in that case you need to install RS into a web farm.
I hope this clarify a little bit when you can use and when you can not use SE for RS.
Regards
Sorin Radulescu

Firefox will not download attachments in hotmail on the web app

On hotmail, attachments will not open through the web app. It works on internet explorer but not firefox. I cleared the cache and cookies already and I use microsoft security essentials.
Thank you!

tried this, but to no avail! thanks anyway

HT1918 After seven ios updates, why is iBooks still the only app that won't synch between iphone & ipad?!?

After seven ios updates, why is iBooks still the only app that won't synch between iphone & ipad?!?

Hi there,
Thanks for the reply. I did think that could be the case but then other books would also show up as apps on phone but not counted as an app. Maybe book apps downloaded from the app store work in this way whereas books bought from the ibooks app show in ibooks and not as apps.
I guess that would make sense, it must be because they are books but downloaded from the app store rather than the book store so they are visible as an app but don't actually get counted as an app.
Would you think that's the case too?
Thanks
Adam

Why should we trust the web app pool account for delegation?

Similar Messages

Maybe you are looking for