Monday, March 19, 2012

Integrated security for web apps

We have setup IIS and SQL Server for integrated security which works fine as
long as SQL Server is on the same box as IIS.
Is it possible to use the Windows login security credentials that IIS
captures to access SQL Server when it is on a different box?
Many Thanks.If you're using NT Challenge Response and Trusted Authentication, you're
problem is documented here.
176380 How To Use ASP with a SQL Trusted Connection with Guest Account
http://support.microsoft.com/?id=176380
307002 PRB: ASP/ODBC/SQL Server Error 0x80040E4D "Login Failed for User
http://support.microsoft.com/?id=307002
175671 PRB: 80004005 ConnectionOpen (CreateFile()) Error Accessing SQL
http://support.microsoft.com/?id=175671
Depending on the requirements and your environment, if you want to pass the
credentials from the web user to IIS to SQL, then
you'll need to be in a Windows 2000 AD environment and use Security
Delegation to make this work.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||We are able to accomplish this w/o AD, and for an Internet application I was
always under the impression that AD was not a good idea. The main issue we
found was getting the connection string right, and making sure the users are
syncronized between the machines. We created the IUSR on the SQL box with
the same password as on the IIS box. Make sure to either get or change the
IUSR password in the Meta base, Local Users/Groups and not sure if it's the
same as the meta base but changed it in the ISM as well.
Dan
"Kevin McDonnell [MSFT]" wrote:

> If you're using NT Challenge Response and Trusted Authentication, you're
> problem is documented here.
>
> 176380 How To Use ASP with a SQL Trusted Connection with Guest Account
> http://support.microsoft.com/?id=176380
> 307002 PRB: ASP/ODBC/SQL Server Error 0x80040E4D "Login Failed for User
> http://support.microsoft.com/?id=307002
> 175671 PRB: 80004005 ConnectionOpen (CreateFile()) Error Accessing SQL
> http://support.microsoft.com/?id=175671
> Depending on the requirements and your environment, if you want to pass th
e
> credentials from the web user to IIS to SQL, then
> you'll need to be in a Windows 2000 AD environment and use Security
> Delegation to make this work.
>
> Thanks,
> Kevin McDonnell
> Microsoft Corporation
> This posting is provided AS IS with no warranties, and confers no rights.
>
>

No comments:

Post a Comment