Folder Problems

Bill Bell · Post by **Bill Bell** » Thu Aug 19, 2004 12:56 pm

Hi, I have tried to move Vault Services (not database) to a Windows 2003 machine on a domain. All went well except Shadow Folders.

I read up and knew I had to put impersonation on for 2003 especially since I need to go across servers for shadow foldering.

The error I am getting from the shadowfolder log is

20/08/2004 02:37:10 <refresh>: [<null>:5488] Uncompress finished, reading into memory from disk
20/08/2004 02:37:10 <refresh>: [<null>:5488] Successfully read from disk into memory, delta loaded
20/08/2004 02:37:10 <refresh>: [<null>:5488] GetRepositoryStructure finished
20/08/2004 02:37:10 <mutex>: [<null>:5488] Took mutex 1564
20/08/2004 02:37:10 <mutex>: [<null>:5488] Released mutex 1564
20/08/2004 02:37:10 <generic>: [<null>:5488] Vault's Shadow Folders encountered an exception attempting to get the repository structure for TIMS. Access to the path "SourceGear\Vault_1\PluginWebService\CD1BC255-2B6F-4D7E-A014-3641537F89CF\admin" is denied.
20/08/2004 02:37:10 <mutex>: [<null>:5488] Took mutex 1328
20/08/2004 02:37:10 <mutex>: [<null>:5488] Released mutex 1328
20/08/2004 02:37:10 <generic>: [<null>:5488] Vault Shadow Folder encountered a problem: Access to the path "SourceGear\Vault_1\PluginWebService\CD1BC255-2B6F-4D7E-A014-3641537F89CF\admin" is denied.
20/08/2004 02:37:10 <mutex>: [<null>:5488] Took mutex 1328
20/08/2004 02:37:10 <mutex>: [<null>:5488] Released mutex 1328

The account I am using is the same one I used to install Vault Services (admin). The appdata exists. The log shadowlog has been put in the c:\windows\temp directory rather than the shadowuser\local files\temp directory. I have checked all the file permissions.

When I installed the Vault Services I selected Option 1 - Network Service, Pointed to the old database on another server, then edited the shadow folder web.config file. (which is attached)

When I try and create a shadow folder it does it very quickly with no error messages.

Its now pretty early in the morning here. I believe I have read all relevant postings...do you see something really obvious

Version is V2.05 on Windows 2003 Server (Not DC) in a domain.

Thankful for any assistance

Bill Bell

<?xml version="1.0" encoding="utf-8"?>
<configuration>
<system.web>

<compilation defaultLanguage="c#" debug="false" />

<customErrors mode="RemoteOnly" />

<authentication mode="None" />







<trace enabled="false" requestLimit="10" pageOutput="false" traceMode="SortByTime" localOnly="true" />

<sessionState mode="InProc" stateConnectionString="tcpip=127.0.0.1:42424" sqlConnectionString="data source=127.0.0.1;Trusted_Connection=yes" cookieless="false" timeout="20" />

<globalization requestEncoding="utf-8" responseEncoding="utf-8" />

<httpRuntime executionTimeout="86400" maxRequestLength="10240" useFullyQualifiedRedirectUrl="false" minFreeThreads="8" minLocalRequestFreeThreads="4" appRequestQueueLimit="100" />

<identity impersonate="true" userName="TWA\TRSUPPORT" password="xxxxxx" />
</system.web>
<appSettings>

<add key="enableLogging" value="true" />

<add key="classesToLog" value="all" />

<add key="includeLoggingStackTraces" value="false" />

<add key="includeThreadInfo" value="true" />
<add key="shadowfolder_login" value="admin" />
<add key="shadowfolder_password" value="43LVRDyYad5cGCotvEg06RM1CFq/iNBP" />
<add key="shadowfolder_vaultserver" value="http://172.20.252.218/VaultService" />
<add key="shadowfolder_workingfolderassociations" value="Shadow Folder Associations">
<rep repid="6">
<sfa assoc_key="6:$/tims production-\\dtf043\timsvault" reppath="$/TIMS Production" localpath="\\DTF043\TIMSVAULT" readonly="False" repid="6" />
</rep>
</add>
</appSettings>
</configuration>

Bill Bell · Post by **Bill Bell** » Thu Aug 19, 2004 1:16 pm

Looking at other posts, support asks if the user can create directories under the guid in the appdata. Yes I can.

When doing this I discovered that the read-only attribute is set all the way down from the shadow users top directory under documents. When I try and unset it and go back and check, it has been reset to readonly. Inheritance has been turned off.

Does this help

Bill.

Post by **jclausius** » Thu Aug 19, 2004 3:26 pm

Have you logged into the machine running Shadow Folders onto the TWA domain as TRSUPPORT?

When you do log on as TRSUPPORT, can you run the Vault GUI client?

Bill Bell · Post by **Bill Bell** » Thu Aug 19, 2004 6:38 pm

Yes, have logged into the machine running shadow folders, I installed it using this logon, I also used it to startup the admin program try and create the shadow folders.

Never installed the client gui on the server. Have just done so, was able to logon and browse about. I tried to recreate the folder using the admin tool, same quick response time. Got the same errors in the log

20/08/2004 08:31:45 <refresh>: [<null>:6048] Successfully read from disk into memory, delta loaded
20/08/2004 08:31:45 <refresh>: [<null>:6048] GetRepositoryStructure finished
20/08/2004 08:31:45 <mutex>: [<null>:6048] Took mutex 1472
20/08/2004 08:31:45 <mutex>: [<null>:6048] Released mutex 1472
20/08/2004 08:31:45 <generic>: [<null>:6048] Vault's Shadow Folders encountered an exception attempting to get the repository structure for TIMS. Access to the path "SourceGear\Vault_1\PluginWebService\CD1BC255-2B6F-4D7E-A014-3641537F89CF\admin" is denied.
20/08/2004 08:31:45 <mutex>: [<null>:6048] Took mutex 1424
20/08/2004 08:31:45 <mutex>: [<null>:6048] Released mutex 1424
20/08/2004 08:31:45 <generic>: [<null>:6048] Vault Shadow Folder encountered a problem: Access to the path "SourceGear\Vault_1\PluginWebService\CD1BC255-2B6F-4D7E-A014-3641537F89CF\admin" is denied.
20/08/2004 08:31:45 <mutex>: [<null>:6048] Took mutex 1424
20/08/2004 08:31:45 <mutex>: [<null>:6048] Released mutex 1424

Where to from here

Post by **jclausius** » Thu Aug 19, 2004 8:22 pm

Access to the path "SourceGear\Vault_1\PluginWebService\CD1BC255-2B6F-4D7E-A014-3641537F89CF\admin" is denied.

Its as if the shadow folder web service is not being impersonated correctly. The path error should read something like: 'C:\Documents and Settings\TWA.TRSUPPORT\SourceGear\Vault_1\PluginWebService\...'. When impersonation is not configured correctly, the base location of the directory cannot be found, just as you are seeing.

Your posting of Vault Shadow Folder's web.config looks correct. TRSUPPORT is the name of a Windows account on the TWA domain.

Can you double check that TWA\TRSUPPORT was created with all the correct .Net permissions mentioned in FAQ: Configuring Shadow Folders for UNC Paths

Also, you might want to double check the password. Since the plain text password is stored in an xml based file, make sure any &, <, >, or " in the password are escaped to & < > or "

Post by **jclausius** » Fri Aug 20, 2004 8:14 am

One other thought here:

This would only work on IIS 6.

- Create a new Application Pool specifically used for Shadow Folders
- In this new App Pool, change the identity to be TWA\TRSUPPORT
- Modify the Vault Shadow Folder virtual directory so it is using this new App Pool
- Within Vault Shadow Folder's web.config, turn off identity impersonation.

What this does is force the Vault Shadow Folder web service to run under the TRSupport account.

At this point, this is all guess work. But an idea that might work.

Bill Bell · Post by **Bill Bell** » Fri Aug 20, 2004 10:48 am

YES YES YES

IT WORKED IT WORKED.

Took out the impersonate line

Assigned the ShadowFolder to a new Application Pool that I created with the TRSUPPORT user as the identity.

And she's now cooking with gas.

Fantastic Jeff, Thanks very much for your help. Maybe now I can get some sleep with management off my back.

Thankyou.

Bill

Post by **jclausius** » Fri Aug 20, 2004 11:42 am

OK. I'm glad it worked. I'll update the Win2003 KB article with this new idea as well.

Thanks for being the guinea pig on this idea!

SourceGear Support

Folder Problems

Folder Problems

More Information