Authentication Across Internet
Jan 3, 2007
From what I have understood, Reporting Services could be configured to use Basic Authentication. In this way, a user can access a RS-server across the internet and he/she will be prompted for a valid username/password when trying to access.
However, from what I can understand this username and password will be sent uncrypted over the Internet (from the client machine to the RS-server), right?
My problem is, I need to give access to users acress the internet to a RS-server. The users uses all kind of operating systems (Windows, Linux, MacOS tec). And the communication needs to be encrypted.
How would you recommend me to implement security for this solution? I guess some kind of "Forms authentication" will have to be used? But how to make sure the data traffic is encrypted? And where do you recommend me to store the username and passwords? In an Active Directory on the server side, or in a separate database on the server side?
regards Andreas
View 7 Replies
ADVERTISEMENT
Mar 6, 2007
We're trying to determine the best way to implement an authentication mechanism for our reporting services solution. Basically, we are exposing a web application to the internet, and allowing a forms authenticated user to access our report server somewhere within our intranet to view reports. I've browsed msdn and found that there are two approaches:
1. create a custom authentication extension for reporting services
2. create a restricted domain user that is allowed to access the report server
Going with approach 2 and assuming I'm using a ReportViewer control, in order to authenticate with the report server (using the one domain user created specifically for report server access), are we supposed to just provide an instance of an object implementing IReportServerCredential containing the domain user information to the Credentials property of the ReportViewer.ServerReport before accessing the report? Is this the correct way to implement approach 2? Also, if implementing approach 2 is so simple compared to approach 1, why would anyone choose to implement custom authentication extension if they don't need fine-grain access control on the report server level?
Thanks for any help and suggestions!
View 11 Replies
View Related
Dec 19, 2007
does anybody know why MS doesnt consider Basic Authentication a viable solution for Inter/Xtra net access to RS? I'm re reading the documentation at http://msdn2.microsoft.com/en-us/library/bb283249.aspx but so far am not getting what the Security Extension options accomplish that can't be accomplished with much less effort using some form of Basic Authentication.
View 25 Replies
View Related
Jun 1, 2006
I have a very confusing problem that I'm going to attempt to relay concisely:
I have a LAN on which I'm running an Intranet web site built in ASP.Net 2.0 and using SSRS / Sql Server 2005 on the same server.
The name of the box is "warehouse" or "warehouse.mydomain.us." When I ping "warehouse," I get a response from 137.86.166.8, as I should. Likewise, I get a response from 137.86.166.8 when I ping "warehouse.mydomain.us." If I do a "ping -a" on 137.86.166.8, it correctly resolves to "warehouse.mydomain.us." Based on the facts presented in this paragraph, I believe that my DNS is working as expected.
Using IE (6.0.2900.2180.xpsp_sp2_gdr.050301-1519) with "low" security settings, I navigate to http://warehouse.mydomain.us/lex/ (Lex is the name of the app) and it authenticates me to the index page (which calls the SSRS web service to get and display a list of available reports), except that I get the login prompt three times. If I hit F5 (refresh), I get three more login prompts and then I get a 401.1 error. From this point, no matter what I do, I can not see the index page again without closing and restarting IE.
I know that IE only passes credentials to certain sites, so I add my domain (http://warehouse.mydomain.us/) to the Local Intranet list ( Tools->Internet Options->Security->Local Intranet->Advanced) and then I can refresh and see my index page once, but I still get 3 login attempts and then the same thing happens -- I refresh and go through 3 logins and then get a 401.1.
If I now change my address bar to read http://137.86.166.8/lex, I get a single login and it works like a champ. This makes me think that there's a DNS problem, so I open up Mozilla Firefox and wouldn't you know it -- Firefox works like a champ all around -- one single sign-in, it keep credentials between Lex and SSRS, and it appears to use the DNS correctly. However, I can't use Firefox because I can't get any of the SSRS reports to look like they're supposed to in Mozilla-based browsers.
Argh.
I have set my IE securtiy settings to "Low." I have added the primary domain to the Local Intranet list and also to the Trusted Sites list (but you can't do both at the same time). I have even added the internal IP to my "hosts" file.
Does anyone know anything that might be a help to me in getting this figured out?
Other notes of interest:
My machine is an XP machine, but is not on the domain, but I do have a valid domain login that I use and it works in Firefox without problem.
View 6 Replies
View Related
Aug 22, 2007
I folks.I Have installed sql server 2005 express and choosed windowsauthentication on instalation, but i make a mistake and now i needmixed authentication, how can i modify this whithout uninstall andinstall again the application?thanks for the help.
View 2 Replies
View Related
May 11, 2007
How to give authentication for Send Mail Task component?
View 4 Replies
View Related
Apr 18, 2007
Hi there,I have installed MS SQL Server 2005 on my machine with windows authentication. But now I want to switch the authentication mode to SQL Authentication. I am unable to switch, I can’t find the proper way to do so here in 2005.Could any one help me in doing this?Thank you,-Ahsan
View 1 Replies
View Related
Mar 25, 2004
Hello,
(Using win2k, sqlserver2k, framework 1.1)
I have an fairly data-heavy application that uses Windows authentication (Trusted connection/aspnet account) to connect to Sql Server. The site uses IIS basic authentication.
On the dev server everything works fine but when I move to the live server things get strange and it starts to crawl along. (Pages load OK but then it just crawls as it loads the datagrids etc. Sometimes it brings back incomplete/incorrect data )
BUT When I use Sql Authentication to connect to Sql Server and there is no problem at all!
Ok, there is something obviously wrong with the live server (which is identical setup to dev)but I dont know where to start.
Any ideas??
View 2 Replies
View Related
May 15, 2006
Hi all,
I've got two applications which both have a database on my MS SQL 2000 server. The problem is, one application must use Windows Integrated Authentication (which it is currently using and cannot be changed) whilst the other application which I'm trying to configure must use a SQL password.
Since the server has already been configured to use Windows Integrated Authentication for the existing database and application, how do I configure the other database to use the SQL password?
Thanks.
View 1 Replies
View Related
May 12, 2006
Hi all,
My work is using a shared application
which accesses a MSSQL 2000 database. To access the application, the
folder on the Windows 2003 Server is shared and users can access the
folder through a shared drive.
For the application to access the
database, it uses an ODBC connection to the MSSQL server which
originally used the SA password.
We have recently switched to using
Windows Integrated Authentication because we believe it offers a
higher level of security. However the only way in which we have been
able to enable this is to add the windows users to the SQL server.
The problem with this is that the
application sets permissions for individual users on what records
they can see within the database. We have found that by adding the
windows users to the SQL Server, they can bypass the permissions the
set by the application by simply using any application that can use
an ODBC connection, such as Enterprise Manager, and see all the
database.
One way around this would be to set up
domains of users with access privileges to the tables which reflect
the permissions set by the application, and configuring a view of the
data so they may only see the records that they have permissions to.
However to do this would require a high administrative cost to ensure
that changes made in the application are reflected in the privileges
of the SQL server.
Instead, is there a way the SQL server
can authenticate that the ODBC connection is coming from the correct
application using Windows Integrated Authentication?
This would allow the applcation to
determine security, and stop users from connecting to the SQL server
using other applications.
Alternatively, can the SQL server,
using Windows Integrated Authentication, also ask the application to
supply a username and password?
Any help with this matter would be
greatly appreciated.
Thanks!
View 4 Replies
View Related
Aug 25, 2006
Hi,I'm using SQL Server 2005. My Connection String looks like that at the moment: <add name="LocalSqlServer" connectionString="Data Source=xx;Initial Catalog=xx;Persist Security Info=True;User ID=xx;Password=xx" providerName="System.Data.SqlClient"/> Now I'd like to change this kind of authentication to Integrated Windows AuthenticationI added the WorkerProcess IIS_WPG to the permitted Users but it didn't help.Changed the Connection String to this:connectionString="Server=xx;Database=xx;Trusted_Connection=True;"All I'm getting is that my NetworkService is not permitted to access DB when I try to connect to the DB in ASP.NET.How can I properly configure that? Thanks!
View 4 Replies
View Related
May 8, 2003
Hello
Can anyone tell me what is the difference between sql authentication and windows authentication.
Examples of each would be very useful
Many thanks in advance
Steve
View 2 Replies
View Related
Oct 16, 2006
Would anyone please help me out here. which of the 2 modes of authentication is better and why??
View 3 Replies
View Related
Dec 18, 2006
Hi,
Say, I have configured my SQL to use Mixed Authentication. Now, I have a applicaiton which uses my SQL Server. The application just creates a database in SQL Server and uses the database to store its information.
This application also has a SYSTEM DSN under ODBC through which it accesses the database. For the application to access this database, should I only use SA (as my SQL instance is configured to use Mixed Authentication) or can I use Windows Authentcation too...
If I should only use SA, do we have a documentation which talks about this.
Thanks
Santhosh
View 1 Replies
View Related
Mar 12, 2008
For using different services of SQL SERVER 2005 which is better...
Windows Authentication or SQL Server Authentication?
what are the advantages and disadvantages of both?
View 5 Replies
View Related
Feb 1, 2008
Hi.
I wonder if it is possible to set forms authentication for report manager but leave report server "as it is". I need to authenticate users from external LDAP and can't use windows authentication for report manager, but I would also like to leave report server open for anonymous users. In that way authenticated administrators could create reports which anonymous users could read.
I tested the Security Extension Sample and got it working when I rewrote the authentication part with my own LDAP authentication.
If I have understood correctly, the report manager is just application inside report server so is it possible to use forms authentication with one application but still leave the report server with Windows authentication?
View 1 Replies
View Related
Aug 14, 2001
Hi,
I need to figure out what kind of Authentication , I need to use for following applicaiton
Product : -
1 ) It resides on a its Domain and has access to Database on that Domain.
2 ) We have a application level login , n based on application login id
display specific pages.
The question that bother me is this
Q ) If i use NT authentication , then a user will be required to
a ) Login to domain (with userid and password) first and then
b ) Then i would require to again login to applicaiton with application
level login and password.(different levels of login as there)
Based on the application level login i will display only specific
asp pages. They have different access rights..and roles.
Requirment is to login only once..and it should authenticate to application display specific pages and authenticate to SQl server database also..
Is there any way thru which i can map my application level login to SQl server.. and what authentication should i use..
Thanks,
Teny
View 2 Replies
View Related
May 31, 2007
I am in the process of rolling out a sql server 2005 enterprise install and had a question regarding authentication. We will be providing sql hosting for a number of groups on our campus, many who are not using our campus-wide active directory, though they all have an AD account.
Windows authentication via the management studio appears to use your AD authentication tokens and will not allow them to enter a username/password combo. Is there any way to configure this?
I would like to use our campus AD for obvious reasons but if there is a requirement for passing tokens this isn't going to work right? It's also going to make database mirroring more of a challenge.
Thanks
View 3 Replies
View Related
Jul 5, 2001
I am trying to connect to SQL Server 2000 using the enterprise manager, and I want to do it over the Internet. My server is in another country and I am using SQL authentication. When I try to make the connection I get a message of server does not exists or access denied. If I ping the server the ping is successful, I am using TCP/IP as protocol for the client, I am not behind any firewall, and the port 1433 is enabled and is the default. I imagine it has to be something with permissions but since I am using SQL validation it should work. Is there something else I have to change?
View 2 Replies
View Related
Jul 11, 2001
Hello,
I am trying to upload a database (MS SQL 7) from my machine to a remote location (host company). This company has MS SQL Server 7 running in its machine, so they told me that all I had to do was to connect from my SQL Enterprise Manager. I am new to MS SQL, so I would appreciate if someone can help me to create a connection from Enterprise Manager to this remote SQL Server.
Thanx
View 1 Replies
View Related
Jul 16, 2001
I need to access my SQL server from another domain across the internet. How can I do this? Everything I have tried has been unsuccessful.
Chris Walcott
View 2 Replies
View Related
Jan 21, 2000
Hi
Could someone help me out with administration of SQL Server over the internet.
What do I need to change on my SQL Server and what will I need to configure on my clients using SQL analyzer connecting over the internet
Vijay
View 1 Replies
View Related
Mar 13, 2000
Hi,
I am developing a VB app that will be accessed over the net. What do i need to do so that my users will be able to connect to the SQL server without being denied the permission.
a hind regarding the network library settings will be most appreciated.
Thanks in advance.
Deepak.
View 2 Replies
View Related
Feb 9, 2000
I would like to know how I can make data from sql 6.5 availeble for viewing on the internet. I think that I have to use ASP but how to implement this and what the steps are to follow is a big mystery for me, so if someone can the me more about this....
View 3 Replies
View Related
Mar 29, 1999
Hello,
I will soon be managing a sqlserver/iis4.0/nt box located remotely in another state. It has a permanen connection to the net. I have a dialup connection.
I have a remote control package, but it is slow. Is there a way to add that boxes sql server to my enterprise manager on my local nt server so that I can
adminsiter it from my machine? I am not over familair with sql server, but quickly learning!
Will I need to set up a vpn to do that?
I searched microsoft knowledge base, but could not find anything.
Thanks for your support.
Johanna
View 2 Replies
View Related
Aug 6, 2001
Hi,
I am trying to replicate using Win 2000 and Sql 2000 on the Internet(FTP) using merge replication
The seqence of Activities are
..Intializing
..Connecting to publisher 'PUBSERVER'
..Retrieving publication Information
..Retrieving Subscribtion Information
..The subscription has been marked for reintialization.Reinitialization will occur the next time you synchroize this subscription
..The schema script 'Pubserver.. .. emp_1.sch' could not be propagated to the subscriber.
..The schema script 'Pubserver.. .. emp_1.sch' could not be propagated to the subscriber.
..The process could not read the file 'Pubserver....emp1.sch due to OS error 53
Can you help me out with this
(Please not I was able to replicate on the LAN with the same setup)
Regards
Anil
View 2 Replies
View Related
Dec 9, 2004
Hello again pals, i meet you again to ask an old question i had, but no found answer.
Can i connect to a remote SQL Server thru Internet, lets say from a client like Query Analyzer?
I read to make it using a VPN, but i try to configure it and cant get connected.
I'm using a Win2000 Server or Win2003 Server,
Thanksfull!!!!
There is many people asking for that, i start to think it cant be done! :'(
View 6 Replies
View Related
Jan 11, 2006
Hi,
Now I really need you help. I have an application that needs to conect to a server
over the internet and I have change the MSQL port to 2015 cos the server even with a
firewall it has been attempt to be hacked. So I needed to change the port but my application
cannot conect to the server if I change it. If I left in the firewall 1433 and SQL it works fine
but once I change it to 2015 it doesn´t work.
I´m using ADO conection as folow:
Variables string parameters:
01=password
02=user
03=database
04=server IP adress
"Provider=SQLOLEDB.1;Password='+01+';Persist Security Info=True;User ID='+02+';Initial Catalog='+03+';Data Source='+04;"
Using this conection string I can conect to the server using 1433 port but if I change the port I get the folow message:
"[DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied."
I´d try to add the new port number to IP adress but it doesn´t work as (200.121.65.140:2015) and it return the folow message:
[DBNETLIB][ConnectionOpen (ParseConnectParams()).]Invalid connection.
What I need to know or to do? Please somebody help me cos I don´t know more what to do and my superiors need awnsers.
Thanks for attetion.
Leonardo Almeida.
View 3 Replies
View Related
Sep 23, 2006
hello,
we are learning sql2000 at school. i have been put in charge of trying to make it possible for the students to connect to the sql database from home.At the college they connect via a lan. Can anyone give me a way to do this, or is there a way. There are 30 students who will need to connect not all at the same time. Besides buying something like pcanywhere is it possible and how. I would really appreciate it. thanks again, tom
View 2 Replies
View Related
Jun 17, 2008
Please help me connect sql server over internet. I tested the connection in Windows XP, SQL Sever 2000, Router (forwarding IP port 1433) and its is working properly.
But using the same process in Windows 2000 Advance Server, Microsoft SQL Server 2000, Router (forwarding IP port 1433) Im getting the error "Unable to connect to server" . Can any one help me to setup this network. Thank you in advance!
View 11 Replies
View Related
Jan 22, 2007
it is my first time using SQL remotely, i am used to client/server ..
i need to run query and execute procedure remotely.
i have SQL server 2000 installed on one machine connected to the internet with static IP adress, the second machine does not have SQL server but also connected on the internet but different cities.. so how that can be possible?
i am using VB6 to and ODBC, i need to know the full code to execute procedure or run query and what i have to do on the first machine to let it work and give me access over the internet?
View 1 Replies
View Related
Jun 1, 2008
I have just started on SQl Server and C# and was wondering if the following is possible.
Using a Windows application, is it possible to connect to a database held on another computer via the Internet? I am not talking about a local network / domain whatever.
What I am really asking is can you use the IP address of a 'real' remote computer in the connection string or is it done some other way?
John
View 1 Replies
View Related
May 31, 2007
Can SQL Server do mirroring over Https protocol over internet?
View 3 Replies
View Related
