If you have a symbol proxy setup and you need to have it talk to a symbol server path that references a UNC share on a server that isn’t on the same domain as the IIS webserver hosting symproxy, then you may need to do some hackery to get the symbol proxy to work properly without prompting for credentials to use on the network.<\/p>\n
\u00c2\u00a0Specifically, the problem here is that there is no way to tell IIS to try and map a UNC share with a particular username and\/or password before processing\u00c2\u00a0a request unless the request itself points to a network share.<\/p>\n
One way to work around this is to use a simple ISAPI filter that I wrote (UncAccessFilter) to make sure any required UNC paths are mapped before the symproxy ISAPI filter is called.\u00c2\u00a0 After installing the ISAPI filter in the usual way, make sure that it is prioritized above the symproxy filter.\u00c2\u00a0 To configure it, you will need to manually set up some values in the registry.<\/p>\n
\u00c2\u00a0Create the key “HKEY_LOCAL_MACHINE\\Software\\Valhalla’s Legends\\Skywing\\UncAccessFilter” and ensure that the user web requests will be running in has read access to it.\u00c2\u00a0 You will probably want to ensure that only the web access user, administrators, and the system account have read access to this key because it will have passwords stored in it (be aware of this as a potential security risk if someone gets access to the registry key, as the passwords are not obfuscated in any way).\u00c2\u00a0 Then, for each share, create a REG_SZ value whose name is the share path you want to map (e.g. \\\\fileserver\\fileshare) and whose contents are of the format “username;password”, for instance, “fileserver\\symbolproxyuser;mypassword”.<\/p>\n
To debug the filter, you can create a REG_DWORD value in that key named “DebugEnabled” and set it to 1, in which case the IIS worker process under which the ISAPI filter is running in will do some diagnostic\u00c2\u00a0OutputDebugString calls about what operations it is performing\u00c2\u00a0if you have a debugger attached\u00c2\u00a0to the process.\u00c2\u00a0 Assuming you configured the filter properly, on startup, you should see a series of messages listing the configured UNC shares (you may need to attach to the svchost process that creates the w3wp worker processes and use `.childdbg 1′ to catch this message for the new worker processes on startup).<\/p>\n