Impersonation trouble

stefanmaier

Hi All,

I need some input to do a workflow migration from TS 6.5 SP3 to Ts 6.7.1 SP1, especially about the impersonation feature for windows...

My new system:
- fresh TS 6.7.1 SP1 installation
- on Win 2003 SP1
- disable_ext_task_impersonation=false in iw.cfg

My workflow:
It's a simple generate->submit->deploy workflow, which we use already on our TS6.5-system,
file generation is done by a iwpt_compile.ipl-invocation.

If an author (has real windows account) starts this workflow on our TS6.7.1 SP1-system, all files are generated correctly.
Problem is, that all iwextattr.exe-statements within the workflow don't work, no ExtAttrib is set on the generated files.

In the iwutild.log and iwtrace.log are no error messages.
iwutild_cmdout.log gives my the message "Unable to create EA, error 13",
Command-Line Tool documentaion says, that this is a permission denied error.
But the user definitly has write access to the files (he generated the files before...)

I assume, that this error is a effect of the new impersonation mechanism, but what's to do, so that the EAs are set correctly?

The 671sp1 release notes give some information to disable the impersonation mechanism for a specific command:
"Disable impersonation for a command by adding a field, impersonate="false", in the command's XML tag in the iwutild.cfg file."
But what are the correct settings to achive this for the iwextattr-command?
I tried these two settings, but with no effect:
<command name="iwextattr" path="C:\iw-home\bin\iwextattr.exe" script="C:\iw-home\bin\iwextattr.exe" impersonate="false"/>
or
<command name="iwextattr" path="C:\iw-home\bin\iwextattr.exe" script="C:\iw-home\iw-perl\bin\iwperl.exe" impersonate="false"/>

All hints are welcome...

Regards
Stefan