Support

Akeeba Backup for Joomla!

#23138 Backup Fails 50% with Access Denied

Posted in ‘Akeeba Backup for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Akeeba Backup version
n/a

Latest post by nicholas on Thursday, 20 August 2015 01:35 CDT

user88070
EXTREMELY IMPORTANT: Please attach a ZIP file containing your Akeeba Backup log file in order for us to help you with any backup or restoration issue. If the file is over 2Mb, please upload it on your server and post a link to it.

Description of my issue:
Joomla is running on Windows 2008 R2 with IIS 7
Systems gets through 50% then errors out when starting the backup of files. Here is the error:
AJAX Loading Error
HTTP Status: 500 (DirectoryIterator::__construct(C:\inetpub\wwwroot\websitename,C:\inetpub\wwwroot\websitename): Access is denied. (code: 5))
Internal status: error
XHR ReadyState: 4
Raw server response:

I have replaced the text websitename in place of the real website name in the above error.

The reason for the backup is that I would like to upgrade my site to the latest version of Joomla. It is better to be safe than sorry.

nicholas
Akeeba Staff
Manager
PHP does not have directory list privileges for your web site's root. Typically this is where we ask you to contact your host but since you're your own host I will try to give you some good pointers. FYI I don't have a Windows machine at hand so I'm giving instructions adapted from notes I kept on Windows 7. My Windows 10 machine is about 30 miles away and shut down right now :( Some labels may be different (and they do differ slightly from one Windows version to the next!).

First you need to know which user your server runs under. It is typically a user named something like IUSR_SOMETHING. I will call this IUSR_SOMETHING from now on. If I recall correctly you can find this information in the Internet Information Services management console.

Use Windows Explorer to find your site's root (websitename inside the C:\inetpub\wwwroot folder). Right click on it, select Properties and click on the Security tab. Click on the Edit... button. If you can't see a user named IUSR_SOMETHING, you will have to click on the Add... button, type IUSR_SOMETHING in the big text box and click OK. Now click on the IUSR_SOMETHING user and then take a look at the list of checkboxes below. Click the Accept checkbox on the Full Control row (the topmost one). Click on OK, then again on OK.

Note: instructions adapted from https://www.akeebabackup.com/documentation/troubleshooter/kscantextract.html#kstslocal Same principle, just DON'T use the Everyone user on a live server! Seriously bad mojo.

I hope that helps.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user88070
I already pretty much had that setup. The user IIS_IUSRS had all rights but not full control. I did update it so that it now has full control but I still get the same error. By the way I had an earlier free version that worked this morning. I then updated it to the latest free version and that is when it started to fail. Upgrading that to the Pro version did not change it, and it still errors out.

user88070
I fixed it! I am going to post the fix in case somebody else runs into this problem. I am not sure what this exactly does but here it goes. Under IIS 7 Manager, select the server name on the left pane. Once here there is a section called Authentication under the IIS section. Open this up and you should see Anonymous Authentication with a status of enabled. Right click on this and select edit. Change the setting from the specific user (in my case IUSR) to "Application pool identity". Once this was changed the backup worked without a problem. I did restart the server but I am not sure if this is needed or not.

nicholas
Akeeba Staff
Manager
Thank you for posting the fix! Yes, the IIS_IUSRS is not the user the sites normally run under. I know there is a way to find the user each and every site runs under but for the life of me I can't remember it. Going the app pool identity way is much easier, indeed :)

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!