Configuring for Microsoft's IIS version 4 Server

Follow these steps to configure ShopSite to run with IIS version 4. Be sure to go step by step through these instructions, or ShopSite will not work.

  1. Create an NT user account for the merchant. The account user name must be the same as the site's store ID. Detailed Instructions
  2. Set the permissions on the data, html, and shopsite (ss) directories so that merchant user that you just set up (with the same name as the store ID) has access to those directories (and their contents and sub-directories). Detailed Instructions
  3. Configure the shopping cart (sc) directory so that IIS recognizes it as a URL from which CGIs can execute. Detailed Instructions
  4. Configure the shopsite (ss) directory so that IIS recognizes it as a protected URL from which CGIs can execute. Detailed Instructions
  5. Configure logging to conform to NCSA format. Detailed Instructions

  1. Create an NT account for the merchant. The account name must be the same as the store ID specifided in the store.auth file.

    1. From the task bar, click Start®Programs®Administrative Tools®User Manager for Domains.
    2. Click User, then click New User.
    3. Enter the username, description, and password, then click Add, then click Close.
    4. Click Policies, then click User Rights.
    5. From the pull-down Rights menu, select Logon Locally, click Add, then click Show Users. Select the user you just added.
    6. Click Add, then OK, then click OK one more time.

  2. Configure NT so that the ShopSite merchant and the customers can access the shopping cart (sc), data, and html directories.

    1. Set the correct permissions for the shopping cart (sc) directory.

      1. From the task bar, click Start®Programs®Windows NT Explorer.
      2. Browse to the shopping cart directory or create it (e.g. c:\InetPub\scripts\sc).
      3. Right-click the directory name.
      4. Select the Properties option.
      5. Select the Security tab then click the permissions button.
      6. Click the Add button, then click the Show Users button.
      7. Select the user (store ID) you created in step A, above. Click the down arrow on the Type of Access box, select Full Control, then click OK.
      8. Also give the customer at a minimum read access (if it does not already have it.)
      9. Click OK twice more to return to Windows NT Explorer.

    2. Set the permissions for the html directory by repeating step 1 above.

    3. Repeat step 1 above to set up the permissions on the data directory, but with one variation. Because orders are stored in the data directory, the customers need to have at least Change permission on the directory. Since the data directory is not aliased by the Web server and is not located under the document root (InetPub), customers cannot browse to the directory and compromise security.

  3. Configure IIS to recognize the shopping cart (sc) directory and allow CGIs to be executed from it.

    1. From the task bar, click Start®Programs®Microsoft Internet Server®Internet Service Manager.
    2. Select the Default Web Site for your system.
    3. Right-click on the stores' directory (e.g. /NtStore)
    4. Select New and then Virtual Directory
    5. Enter the URL Alias (e.g. sc)
    6. Browse to the shopping cart directory then click OK.
    7. In the Access box ensure that Read and Execute are checked.
    8. Then click OK, then click OK again.

  4. Configured IIS to recognize the URL of the shopsite directory as a protected URL.

    1. Configure IIS to recognize the shopsite directory.

      1. From the task bar, click Start®Programs®Microsoft Internet Server®Internet Service Manager.
      2. Select the Website for this store.
      3. Right-click on the html directory for this store.
      4. Select Add then Virtual Directory.
      5. Enter the URL alias (e.g. ss) and click Next.
      6. Enter the exact path for the shopsite (ss) directory (e.g. c:\inetpub\scripts\ss) and click Next.
      7. In the Access box ensure that Read, Execute and Script are checked.
      8. Click Finish, then click OK.

    2. Configure password protection for the directory.

      1. From the task bar, select Start®Programs®MicroSoft Internet Server®Internet Service Manager.
      2. Select the Website for this store.
      3. Right-click the directory alias name.
      4. Select properties then select the Directory Security tab.
      5. Select Edit for the Anonymous Access and Authentication Control.
      6. Select the Basic Authentication and deselect the Allow Anonymous Access and also NT Challenge and Response.
      7. Press OK twice more to return to Windows NT Explorer.

  5. To view the Web Server statistics (hits, pages viewed, etc.) from ShopSite, the server log format needs to conform to the NCSA format. To set the logging format:

    1. From the task bar, click Start®Programs®Microsoft Internet Server®Internet Service Manager.
    2. Right click on the store's Website, enable logging and make sure that NCSA format is selected.
    3. Click OK.

      Note: In ShopSite you will configure where ShopSite is to read the logfile from. Because IIS can rotate the log files daily, weekly or monthly ShopSite will need to be reconfigured to read the new log file (e.g.NCyymmww.log) when it is rotated. One solution is to have a program copy (append) the file before the file is rotated to a known file that ShopSite reads.