The information in this article applies to:
- Microsoft Visual SourceSafe, 32-bit, for Windows, versions 4.0, 4.0a,
5.0
- Microsoft FrontPage 97 for Windows
- Microsoft Visual Studio 97
SUMMARY
If you are using either FrontPage or Visual InterDev with Visual SourceSafe
integration, you can use one of two configurations.
You can either store your Visual SourceSafe database on the same machine
that is running IIS, or on a machine other than the one running IIS.
This article presents the required actions to ensure that Visual SourceSafe
integration is working with FrontPage or Visual InterDev for both
configurations.
MORE INFORMATION
This article assumes that the Web server is IIS running on Windows NT 4.0,
that the Visual SourceSafe database is also on a Windows NT 4.0 computer,
and that both are on NTFS partitions. This article covers the steps
necessary to integrate Visual SourceSafe with FrontPage or Visual InterDev.
Section 1 lists the necessary steps to enable integration in either of the
two configurations, and Section 2 lists additional steps you must take if
the IIS service and Visual SourceSafe database are on different machines.
Section 3 contains troubleshooting information.
SECTION 1: Steps Necessary in all Configurations
On the machine running IIS:
- Ensure that the anonymous account has Log On Locally privileges. To do
this:
A. Run the User Manager For Domains.
B. Select the IIS-SERV machine, and select Policies ... User Rights from
the menu.
C. From the right drop-down list, select "Log on locally". Make sure
that the anonymous account is listed either individually or as a
member of one of the groups.
- Check that that the anonymous account has the same password in both IIS
Service Manager and User Manager For Domains. It may be necessary to
have the user re-enter the password in both these places. Two potential
pitfalls are:
A. In User Manager For Domains the password always appears padded out to
14 characters. This can be confusing if you have entered a shorter
password.
B. After changing the password in IIS you should stop and restart the
service to clear out any password caching.
- Make sure that the anonymous account can log on automatically. In User
Manager For Domains make sure that the "User Must Change Password at
Next Logon" and "Account Disabled" check boxes are not selected.
NOTE: If you're uncertain about what your machine's anonymous user
should be, go to the IIS configuration utility, and look in the
properties for the WWW service.
- Check that the correct components of Visual SourceSafe have been
installed. Do this by either running Netsetup from a server installation
of Visual SourceSafe, or if you are installing from CD, either choose
Client Setup, or under Custom click "Enable Visual SourceSafe
Integration."
On the machine with the Visual SourceSafe Database:
To view Directory permissions, right-click the Directory in the Windows NT
Explorer, click Properties, click the Security tab, and then click
Permissions. To view Share permissions, right-click the shared Directory in
the Windows NT Explorer, click Properties, click the Sharing tab, and then
click Permissions.
- Assign CHANGE permissions to all Visual SourceSafe logon accounts for
all files under the Visual SourceSafe installation directory (including
the Visual SourceSafe data directory if it is in a different location).
NOTE: It is assumed that the Administrators and System accounts will be
granted full control to the entire VSS directory hierarchy.
- Grant at least read permissions to all Visual SourceSafe logon accounts
for the following additional files:
srcsafe.ini
um.dat
users.txt
Grant at least read\write permissions to all Visual SourceSafe logon
accounts for the following additional files or directories:
vss\users\<logon account directory>\
vss\data\
vss\temp\
rights.dat
status.dat
In the Visual SourceSafe Administrator:
- Add the anonymous account as a user, with no password.
- Add the actual FrontPage or Visual InterDev user(s) (password optional).
- Under Tools menu, click Options, click the General tab, and make sure
that "Use network name for automatic user log in" is selected.
SECTION 2: Additional Steps Necessary When IIS and the Visual SourceSafe
Database are on Different Machines:
Windows NT Challenge/Response is also referred to as NTLM. Because this
setting is not selected, users have to enter their user name and domain
password when they open a Web. Use the format "domainname\username" for the
user's name when working with multiple domains.
SECTION 3: Troubleshooting
NOTE: If the server machine is a Windows 95 computer, make sure that
someone remains logged into Window 95. Often users will leave their servers
at the login prompt, and the integration between Visual SourceSafe and
Visual InterDev will not work when there is no one logged onto the server.
The Windows NT Event Viewer on the IIS server often contains information
that can help locate the cause of a problem if integration is not working.
These log errors usually come in pairs, the later (topmost) of which
usually contains an error number and the one below it a short description
of the error. Double-click a log entry to view its details.
The errors might differ depending on exactly how the components are
configured, below is a sample of errors encountered and their cause:
Errors that appear in the Application Log:
- Error: Source Control System failure: File "srcsaf.ini" not found.
Cause: Visual SourceSafe integration is not enabled.
- Error: Source Control System failure: User <username> not found.
Cause: The user <username> has not been added to the Visual SourceSafe
database.
- Error: Source Control System failure: Could not find VSS resource DLL
Cause: The anonymous or user accounts do not have the correct NTFS file
permissions.
- Error: Source Control System failure: Access to file "<path>
\srcsafe.ini" denied
-or-
Error: Source Control System failure: Access to file "<path> \um.dat "
denied
Cause: IIS and the Visual SourceSafe database are on different machines
and NTLM is enabled.
- Error: Source Control System failure: Invalid handle
Cause: IIS and the Visual SourceSafe database are on different machines
and the anonymous account has a different password on the two
machines, or does not have Log on locally permissions on the
Visual SourceSafe machine.
Errors that appear in the System Log:
- Error: The server was unable to logon the Windows NT account <anonymous
user account> due to the following error: unknown user name or
bad password.
Cause: On the IIS machine, the anonymous account either does not have
Log on locally permissions, or the account's password in IIS and
User Manager differ.
- Error: The server was unable to logon the Windows NT account <anonymous
user account> due to the following error: unknown user name or
bad password.
Cause: The anonymous user account has been disabled in User Manager.
REFERENCES
General Integration Information:
For general information on FrontPage integration, see
http://microsoft.com/ssafe/techmat/Frontpage.htm
For general information on Visual InterDev integration, see the online
documentation in the User's Guide, Authoring Web Content, Using Visual
Visual SourceSafe With your Web.
Basic Troubleshooting:
For more information on troubleshooting FrontPage or Visual InterDev
integration, please see the following article in the Microsoft Knowledge
Base:
ARTICLE-ID: Q160766
TITLE : VSS Source Control Project Box Does Not Appear in FrontPage
IIS Security and the Anonymous Account:
For general information on IIS security and the anonymous account, see
Chapter 5 of the online documentation for IIS (inetdocs.htm).
For information on IIS security as it relates to FrontPage/InterDev see
http://www.microsoft.com/FrontPage/wpp/serk (FrontPage Server Extensions
Resource Kit)
and
http://www.microsoft.com/workshop/server/feature/security.asp
Necessary Permissions for Visual SourceSafe Directories:
For additional information, please see the following article in the
Microsoft Knowledge Base:
ARTICLE-ID: Q131022
TITLE : INFO: Required Network Rights for the Visual SourceSafe
Directories
Keywords : fpvss ssfp ssidev
Technology : kbInetDev
Version : WINNT:4.0,4.0a,5.0;
Platform : WINDOWS
Issue type : kbhowto