Vulnerability in EPiServer.Forms

Try our conversational search powered by Generative AI!

Tomas Lundgren
Nov 23, 2009
  5600
(2 votes)

EPiServer CMS Indexing Service

Trusted connection

When installing EPiServer using Deployment Center I haven’t really figured out how to enable the the Windows Authentication button in the setup wizard. I usually install with a temp. Sql user and later on I change this to a Windows user with a trusted connection to the database.

setup

One thing what is easy to forget is to change the connectionstring in EPiServer Indexing Service placed in EPiServer.IndexingService.exe.config. IndexingService is by default using “Local system” account. When using trusted connection “Local system” will be used to access the database.

Change the account the service runs on and give the new account access to the EPiServer database.

 

VPP on fileshare

The same thing goes when placing the VPP’s on a fileshare. The Indexing Service will try to access the fileshare with the “Local system” account and it will work if the group “Everyone” can access the share. A better approach might be to change the service account to a windows user and give this new user access to the share.

Nov 23, 2009

Comments

Please login to comment.
Latest blogs
A day in the life of an Optimizely Developer - Optimizely CMS 12: The advantages and considerations when exploring an upgrade

GRAHAM CARR - LEAD .NET DEVELOPER, 28 Nov 2023 In 2022, Optimizely released CMS 12 as part of its ongoing evolution of the platform to help provide...

Graham Carr | Nov 28, 2023

A day in the life of an Optimizely Developer - OptiUKNorth Meetup January 2024

It's time for another UK North Optimizely meet up! After the success of the last one, Ibrar Hussain (26) and Paul Gruffydd (Kin + Carta) will be...

Graham Carr | Nov 28, 2023

Publish content to Optimizely CMS using a custom GPT from OpenAI 🤖

Do you find the traditional editor interface complicated and cluttered? Would you like an editorial AI assistant you can chat with? You can!

Tomas Hensrud Gulla | Nov 28, 2023 | Syndicated blog

Optimizely Graph and Next.js: Building Scalable Headless Solutions

Optimizely Graph harnesses the capabilities of GraphQL, an intuitive and efficient query language to, transform content within an Optimizely CMS in...

Szymon Uryga | Nov 27, 2023