Ask For Password Prior To Allowing Access
Nov 13, 2003
I am trying to make a connection to sql server using sspi (windows authentication), however, I do not wish to use the built in tokenauthentication system. Administrators are worried about somebody using an unattended logged on computer to gain access to the database. So I am left with using sql server authentication (which I am not fond of doing, more password administration) or what I would like to do is use windows authentication but make the user enter thier windows password prior to logging into sql server. Is there a way? Thanks in Advance.
Kent
View 2 Replies
ADVERTISEMENT
Jan 26, 2004
Hi guys,
Is there anyway to allow SQL Server users to change their own passwords without giving them rights to "db_securityadmin" ?
Our M$ adviser suggested creating our own app using SQL NS and DMO to do it.
Is there any easier method, reference, download sample from the web?
View 3 Replies
View Related
Apr 6, 2004
Hey all.
I'm trying to set up SQL Server so that people with Enterprise Mgr can create a DB registration to their DB only (sql.yoursite.com). Are there any tutorials out there for doing this?
Thanks for the help!
View 3 Replies
View Related
Jul 20, 2005
With MS SQL 2000 Enterprise Manager, is there a way to allow a user accessto only a few tables, but deny the user access to the rest without having togo to all of the tables and denying access? The database has roughly 50tables, but only 3 should be granted to the new user, so as you can see itwould be a painstaking task to manually do this with the *cough* mouse. Or,if I can run some sort of grant script, that would work too. Thank you!
View 2 Replies
View Related
Aug 31, 2006
I have read that it is possible to configure sql server express so that the database can only be accessed through stored procedures. Can anyone tell me how to do this. Many thanks.martin
View 2 Replies
View Related
Nov 6, 2015
How to grant users the right to use the DECRYPTBYKEY function to decrypt the data. I have seen some people talk about using a stored procedure or view to surface the decrypted data, but how would you implement that when trying to pull back a single dataset? It would be best to use an inline function to allow the row to be returned decrypted, but opening the keys isn't allowed in the function construct.
So, I know I have to be missing something, but how do you let basic users (db_reader types) decrypt the data they need based on a custom database role? What do I need to give the user permission to?
My setup is simple:
- I have my SMK
- I have a DMK encrypted by password
- I have my self signed certificate
- I have my symmetric Key encrypted by the certificate
View 0 Replies
View Related
Jul 24, 2015
I have connected to Database using my credentials by checking remember password option. After few days I forgot my password. How can I recover the password as SQL remember it. Is there any way to recover my password instead of resetting it.
View 3 Replies
View Related
Dec 11, 2006
that sounds obvious but I'm stuck...
I have an ASP.net application which someone else started and I continue.
on the SQL server there was a user X which was used to access the database from the ASP website.
I accidently changed the password in the SQL server and now I cant restore the prior settings
(trying to reset password to blank or embedding the username and password in the connection string didnt work).
it stops on "connection.open" with - "SQLException Login failed for user 'X'"
any ideas why that happens and how I can fix it?
thanks
View 1 Replies
View Related
Feb 26, 2008
Hi All
I am trying to connect to my report server through URL access and then trying to retrieve some values from my SSRS from my local machine like :
<a href="http://IPAddressOfServer/ReportServer/Reports/?%2fDashboardReports%2fHorse_Profile&rs:Command=Render&HorseID=117415"><%=name%> </a>
But when i click on this hyperlink it asks for the username and password for that server.
However , i am using the following code to connect to my server :
String url = "http://IpAddressOfServer/ReportServer/ReportService2005.asmx";
ReportingService2005Soap port = null;
ReportingService2005Locator loc = new ReportingService2005Locator();
// Retrieve a port from the service locator
try {
port = loc.getReportingService2005Soap(new java.net.URL(url));
} catch (MalformedURLException e) {
// TODO Auto-generated catch block
e.printStackTrace();
} catch (ServiceException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
org.apache.axis.client.Stub stub = (org.apache.axis.client.Stub) port;
stub.setUsername("IpAddressOfServer\USERNAME");
stub.setPassword("PASSWORD");
It is getting connected withut any problem and i am retrieving values also from my SSRS.
But the problem comes when i want to click on some hyperlink and it should go to the report server and generate the corressponding report.
But it is asking for the username and password which is not required.
If there will be some security issue it must not be get connected with the server through the code i am using.
I have tried to connect with wrong password but it gives unauthorized exception.
SO please anybody has any idea, advise me.
Regards.
View 6 Replies
View Related
Mar 5, 2008
We have a few reports that we would like to require the user to enter a password before they can view the report. Is there a way to do this?
Thank You
Kaysie
View 4 Replies
View Related
Jul 20, 2015
HowTo: Import data to MS SQL 2008 from password protected Access DB ?
View 2 Replies
View Related
Oct 25, 2006
Hello, everyone:
I know it is a simple question. I am writing a query to import a table (MyTable) from an Access Database (MyDatabase.mdb). MyDatabase.mdb is in C: in local. This is the query from BOL.
SELECT a.*
FROM OPENROWSET('Microsoft.Jet.OLEDB.4.0', 'c:MyDatabase.mdb';'admin';'mypwd', MyTable) AS a
By BOL, admin and mypwd should be user_ID and password. But I am doing testing in local, and don't set user_ID and password. How to handle two things.
Thanks
YTZ
View 6 Replies
View Related
Jul 9, 2015
There is a ">" character (right-angle bracket) inside my SQL Server password. When I supplied this password to the bcp utility, the ">" character was treated as an output redirection symbol. So the password was truncated at ">" and the bcp output got sent to a file with a name consisting of the rest of the password after ">". I'm using SQL Server 2012. I cannot use Windows authentication due to company policy. Is there a way to resolve this without changing the password?
View 7 Replies
View Related
Feb 17, 2008
Hi,
My code should copy files from a shared folder.
the share can be accessed by all who can provide a specified username and password.
I use the following code:
But where to specify username name password to access that folder?
DECLARE @cmdstr varchar(1000)
set @cmdstr = 'copy \servernamefoldername$ C:DataExTest'
print @cmdstr
EXEC xp_cmdshell @cmdstr
Any sort of help would be highly appreciated.
Thanks in advance
View 10 Replies
View Related
Jan 30, 2007
I dont know how to arrange situation when application enduser needs to access data in two databases of mssql server concurently in those circumstances that access rights to the data should be restricted by password protected role (whose password is not known to the end user).
Detailed description of problem:
So far there was an application, that manipulated its data, saved in mssql server's database. End user authenticates to application by his (mssql server's) login name and password. The application authenticates the user by connecting to the database with the given name/password credentials, and then the application sets application role with hardcoded name/password. Thus application role sets the access rights for consequent end user's requests, delivered via application to the database server.
The goal is that end user cannot manipulate application database data when connects to the database by other means (e. g. via SQL server Manager), because he does not know the application role's password.
Now suppose that there are two applications (A1, A2), both using the same model for access restrictions. Each of them has its own database (A1DB, A2DB) and its own application role (A1R residing in A1DB, A2R residing in A2DB). End user (login) X can manipulate A1DB data when connects via A1, and A2DB data when connects via A2, and NO data when connects by other means.
Finally suppose that some subset of A2 data (let's say one table) is useful to see also via A1 application. There is no problem to add to A1DB view, that shows data from A2DB table together with A1DB tables. But when the user is connected via A1, he cannot see the data, because query on A1 view fails (user has not access rights on A2 data).
The access rights for A1 enduser cannot be set by no means i know because:
1) I cannot set the rights via public (guest) access because in that case they will be accessible to any users connected by any third party products, which is supposed to be security hole.
2) I cannot set the rights via dbuser or dbrole privileges, because they will not work when connected via A1 application (setting the app role suppresses the db privileges)
3) I cannot set the rights via application role because two application roles cannot be set concurrently.
4) I cannot abandon using application roles mechanism and use database roles mechanism, because db roles cannot be protected by independent password (not known to the enduser).
Please can anybody review my problem and either find the mistake in my approach, or propose other solution? So far I suppose the problem is my ignorance, because I am not great mssql expert.
View 3 Replies
View Related
Feb 23, 2004
I 'completed' a DTS package which uses a file on a non-SQL server. I am about to put this into production, so it runs automatically each evening. but just realized that it won't work unless it signs onto the source file's Windows 2000 server. It works for me when I'm testing it because I am always logged on the the Windows 2000 server.
I have been trying to figure out which DTS task I need to use to establish a connection by embedding my UserName and Password. Any tips woud be apprecitaed.
Thanks,
Randy
Learning as I go....
View 1 Replies
View Related
Apr 1, 2008
I have a package protected by a password - I am already unhappy that to get it to use the configuration file to change connection strings for the production servers I have had to hardcode the password into the config file - very insecure!
However, the package now deploys correctly to the production server and will run from there OK, but NOT if scheduled as a SQL Server Agent Job. Thus is because however often I edit the command line to include the password after the DECRYPT switch (which it has prompted me for when I click on the command line tab), the Job Step will not retain it.
If I open it up after I have edited it and closed it, the password has disappeared.
I know that if I run dtexec plus the code in the Command Line tab (with the password), the package runs OK.
This is driving me insane!
I have read all the other posts and so I tried replacing the SSIS package step with a CmdExec step and pasting that code into there - then I get an OLEDB error..
The code I use is:
DTEXEC /SQL "ImportRateMonitoringTables" /SERVER servername /DECRYPT password /CONFIGFILE "D:Microsoft SQL ServerSSISDeploymentsRateMonitoringImportTasksDeploymentImportRateMonitoringTables_Production.dtsConfig" /MAXCONCURRENT " -1 " /CHECKPOINTING OFF /REPORTING E
and I get
SSIS Error Code DTS_E_OLEDBERROR. An OLE DB error has occurred. Error code: 0x8000FFFF
although the same code executes perfectly from a command prompt.
Please does anyone have any experience with a similar problem and if so, how did you get round it?
Thank you
View 9 Replies
View Related
Jun 18, 2007
I am receiving the following error message when attempting to create a new SQL Authenticated login id.
Password validation failed. The password does not meet the requirements of the password filter DLL. (Microsoft SQL Server, Error: 15119)
I have four servers all running SQL Server 2005 SP2 on Windows 2003 Ent. SP1. Of the four servers, only one received the above error message using the same TSQL below.
CREATE LOGIN TEST_LOGIN WITH PASSWORD = 'pvif9dal' MUST_CHANGE, CHECK_EXPIRATION = ON
All four servers are in the same domain, which if I understand correctly, the password policies are therefore inherited at the OS level by the domain. The password being used is within the password policies of the domain.
Any ideas as to a root cause?
View 5 Replies
View Related
Aug 20, 2007
how can i setup an input field and SQL column to allow a user to enter something such as: '1+' into the field and the db? i get an error due to the '+'.
View 1 Replies
View Related
Jun 30, 2007
I tried to install an ALLDATA database which run with SQL Server 2005 express edition. The data base fails to install becase of the following code that come up which is related to AS password requirement. The error that come up is:
TITLE: Microsoft SQL Server 2005 Setup
------------------------------
The sa password must meet SQL Server password policy requirements. For strong password guidelines, see Authentication Mode, in SQL Server Books Online.
For help, click: http://go.microsoft.com/fwlink?LinkID=20476&ProdName=Microsoft+SQL+Server&ProdVer=9.00.2047.00&EvtSrc=setup.rll&EvtID=28001&EvtType=sqlca%5csqlcax.cpp%40SAPasswordPolicyCheck%40SAPasswordPolicyCheck%40x6d61
------------------------------
BUTTONS:
&Retry
Cancel
------------------------------
I am trying to install this database in a network server operating under Windows Server 2003 R2 with SP2. If anyone knows how to solve this problem, please let me.
Thanks,
Amilcar
View 6 Replies
View Related
Nov 25, 2006
I created an UPDATE trigger on a table - but there one case where I would not the trigger to occur. I mean, in one procedure it may update this table and I would not the trigger to occur a update occurred because of this stored procedure. I could alter my trigger but I am not sure if I would be able to tell which procedure caused it without adding a special column, but if I have to I will.
View 2 Replies
View Related
Apr 16, 2008
I have databases
TESTDB db owner testuer
Login testuser
When right clicking on logins i see dbo
When open this i see testuser
So i clicked on Role Members db_backupoperator was denied
had to do it on the owner schema and select db_backupoperator
Not sure why the role member is permitted.
View 10 Replies
View Related
Apr 18, 2008
Hi All,
I installed full version of SqlServer 2005. Iam able to Connect to all the systems that are in Intranet. But iam not able to Connect to the external systems (or) remote Connections. I followed all the steps that are in the following URL support.microsoft.com/kb/914277
Still iam getting the problem. Show me a way in this issue.
Thanks&Regards,
SrinivasReddy
View 3 Replies
View Related
May 28, 2008
Hi All,
I have written a windows service using VB.NET that connects to a database and performs several tasks. The service is working correctly and has been fully tested against SQL Server 2000. I have recently moved to SQL Server 2005 and now, the service will not connect to the database.
I have setup and tried several different users, but none work, I get the following message:
Login failed for user 'OEESYSTEMS'
The server instance, username and password I specify are all correct.
The service is running on the same server as SQL Server. I can connect through a web application, and through ODBC. The server is set to use SQL server and windows authentication, and is setup and successfully allows remote connections.
It looks like SQL server sees that a windows service is trying to connect and does not allow it.
For the love of god, can anyone help with this issue.
Thank you.
View 1 Replies
View Related
Mar 3, 2007
TITLE: Connect to Database Engine
------------------------------
Cannot connect to FRI-0503SQLEXPRESS.
------------------------------
ADDITIONAL INFORMATION:
An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections. (provider: TCP Provider, error: 0 - No connection could be made because the target machine actively refused it.) (Microsoft SQL Server, Error: 10061)
For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&EvtSrc=MSSQLServer&EvtID=10061&LinkId=20476
------------------------------
BUTTONS:
OK
------------------------------
I have recieved this error and i have changed the surface area configuration to allow remote connections but it still won't allow them after i start and restart the server service. is there any way to fix this i have reinstalled several times and that has not yet fixed the problem either.
View 5 Replies
View Related
Aug 1, 2007
I have a flat file that I'm reading from and loading my tables with. In that file I have a column that has numbers (2000,1999,1998 and so on) and the column that they are being loaded into is defined as an INT. The issue I'm running into is that the first 50 or so rows in the flat file is empty for this column so I'm getting an error message. If I put numbers in that column in the flat file it works, if i remove them it fails. How can I allow for NULL values for my INT column on the database table?
here is the error I'm getting:
[OLE DB Destination [182]] Error: There was an error with input column "SalesYear" (7259) on input "OLE DB Destination Input" (195). The column status returned was: "The value could not be converted because of a potential loss of data.".
View 12 Replies
View Related
Mar 3, 2007
TITLE: Connect to Database Engine
------------------------------
Cannot connect to FRI-0503SQLEXPRESS.
------------------------------
ADDITIONAL INFORMATION:
An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections. (provider: TCP Provider, error: 0 - No connection could be made because the target machine actively refused it.) (Microsoft SQL Server, Error: 10061)
For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&EvtSrc=MSSQLServer&EvtID=10061&LinkId=20476
------------------------------
BUTTONS:
OK
------------------------------
this is the error message i get and i don't know how to correct it. i have tried going into surface area configuration and setting it allow remote connections but that hasn't changed anything. i am at a loss for how to correct this situation.
View 1 Replies
View Related
Aug 4, 2007
My users want to be able to enter nothing in a date field.
I'm using asp.net v2, vb.net, and VS 2005 for my application. I'm not sure what to do or what code to write to allow the user not to enter a date and keep from hitting the sqldatetime overflow error.
I could use some help.
Thanks
View 4 Replies
View Related
Apr 18, 2006
Please forgive my post, as I am not a network tech, however I provide pc support to the city offices where I live and they are in need of help.
Physical box and pc's moved to a new location. All setup with proper cabling, etc. At first log on after the move all users to log on as normal, a day or two later, only the Administrator can log on and there is only one administrator profile.
Any duh quick fixes to check out, as this brings down 4 city offices.
Thanks in advance.
View 4 Replies
View Related
Apr 18, 2008
Hi All,
I Installed full version of SqlServer 2005. Iam able to connect to all of our systems which are in intranet. But iam not able to connect to external system. I performed all the steps that are mentioned in the following URL support.microsoft.com/kb/914277 . Even then i was not able to connect to the remote systems. I request you to show me a solution to this issue.
Thanks&Regards,
SrinivasReddy.Tadi
View 1 Replies
View Related
Jun 12, 2001
Developers want to give users the ability to schedule and run processes, which may be executables, T-SQL, DTS, Active Scripting, etc. I don't want to enable a proxy account due to the well documented security problems. Has anyone come up with a good way to do this?
View 1 Replies
View Related
Jul 11, 2006
I'm relatively new to administering SQL Server, hence this basic question.
What are the standard practice tool(s)/methods for allowing users access to a database to edit data? In this case, these are engineers (not programmers) that need to edit some values. The practice in the past has been to install Enterprise Manager on their PC. However, this does not seem proper to me and I was thinking more along the lines of having them use Access instead.
I compare Enterpise Manager in SQL Server as an equilvalent to Enterprise Manager in Oracle - these are tools only for use by database administrators. Is this a correct correlation, or is Enterpise Manager in SQL Server a tool that users (and programmers?) are commonly allowed to use? In the case of common users, I would think not.
Thanks in advance.
View 3 Replies
View Related
Mar 30, 2007
I would like to allow a particular user to truncate a log file in astored procedure that the user runs every day. At this moment the onlypersonnel that can truncate the log file are personnel with sysadminrights. Is there any way to do this in sql server 2005 withoutgranting this user sysadmin rights (something we REALLY don't want todo)? Thanks for all your help in advance.Dave C.
View 1 Replies
View Related
