SQL Security :: Authentication Lockout Option

May 24, 2015

Does SQL Server have any place to configure an account Lockout Threshold  (SQL-authentication), also is there a default value (how many times failed logging would be initiated before the user lockout?)

View 7 Replies


ADVERTISEMENT

IIS Detection On Vista: Where's My Windows Authentication Option ?

Mar 3, 2007

I am trying to install RS on Vista. I notice that the list of IIS features to turn on, listed in the KB article and blog entries, mentions a "Windows Authentication" IIS feature to check under Security. I don't have that (although I have one labeled "Basic Authentication") -- I'm on a "workgroup" computer at home.

Does this mean that you simply can't install RS on Vista unless you're joined to a domain? Thanks,

-Doug

View 18 Replies View Related

Integrated Security Problems With Custom Server Option

Mar 13, 2008

Ok, I need to test my webservice with the 'use custom server' option on so that I can specify a base URL that I can reference from apps on a remote machine. I have a connection string I am using to access a sql server db that has Integrated Security=true and windows login has a login for it created in the db.

However, whenever I try to call a webmethod I get this error:
System.Data.SqlClient.SqlException: Login failed for user ''. The user is not associated with a trusted SQL Server connection.

But when I call the same webmethod specifiying a sql login / pw, and not integrated security, my webmethod works.

I want to use integrated security though, please help!

View 2 Replies View Related

SQL Security Guidelines? (i.e. Authentication, Accounts)

May 3, 2004

We are about to change the sa password, currently all packages and jobs rely on this account. I imagine there is probably a better architecture that we could employ to ease this process. Any suggestions recommendations?

Also any caveats I should be aware of regarding places to look that might currently rely on the sa account so that we do not need to worry about existing processes from breaking?

I think we are going to create an NT account for DTS Packages and possibly use the same account for any DTSRun jobs, does this make sense? Or is there anything to gain by having these as separate accounts? Also should this be the same account used to run the MSSQLServer process?

I tried doing a search for this information here, thinking it was already covered, but could not find anything that informative, any resources that you could point me to would be appreciated, I will look on BOL as well as MSFT to see what I can dig up.

View 1 Replies View Related

Authentication Issues, Security Groups

Jul 23, 2005

Hi,Apologies for not knowing much around this subject, we currently run sqlserver 2000 for a database and have each user marked up on the database.We are moving to use a windows security group, so taking themanagement slightly away from the database server.What I would like to know is, will this effect functions such assuser_sname() by returning the group name instead of user id? I wouldassume not but it's worth checking!Also, I'm guessing if a user is marked on the database as their own idand as part of a security group, then all permissions are thrown in withdeny taking preference? How does this work with a database owner who isalso part of a security group that has limiting functionality?Thanks for your help,Chris

View 1 Replies View Related

SQL Security :: Windows Authentication Fail

Jun 17, 2015

We're using windows server 2012 R2 and sql server 2014 standard with mixed mode authentications. When we connect to other windows server using windows authentication and hit the following error:"the target principal name is incorrect cannot generate sspi context"..is the above err related to mixed mode authentications at installation?

View 3 Replies View Related

Can You Set Up Forms Authentication Without A Security Extension?

Mar 13, 2007

On my current project we have a requirement to re-authenticate the user when accessing sensitive information.

We want re-authenticate using standard NT logins against Active Directory (not a custom database or SSO.

This is trivial to configure using Basic Authentication, however I would like to use an ASP.NET login form. I would like to avoid writing a security extension as I do not want to perform custom authentication. I would like the web service to use it's built in authentication and authorisation mechanisms.

Is the above possible???

The following gives some more details about wht I've tried.

I have tried configuring the report server/manager with Forms authentication as in the sample but cannot get it to work with out implementing the security extensions.

I changed the web.config files and the policy files for permissioning my dll with FullTrust. I did not configure an extension as I want reporting services to use it's built in windows security mechanisms.

In the login page code behind I call the ReportingService2005.LogonUser() method which always throws the following exception:
Client found response content type of 'text/html; charset=utf-8', but expected 'text/xml'. The request failed with the error message: --




Reporting Services Error




The report server has encountered a configuration error. See the report server log files for more information. (rsServerConfigurationError) Get Online Help



SQL Server Reporting Services --.



I check the log file and it has the following:


at System.Web.UI.Page.HandleError(Exception e)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest()
at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context)
at System.Web.UI.Page.ProcessRequest(HttpContext context)
at ASP.logon_aspx.ProcessRequest(HttpContext context)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
aspnet_wp!library!18!03/13/2007-11:38:23:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.InternalCatalogException: An internal error occurred on the report server. See the error log for more details., ;
Info: Microsoft.ReportingServices.Diagnostics.Utilities.InternalCatalogException: An internal error occurred on the report server. See the error log for more details. ---> System.Web.HttpUnhandledException: Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> System.FormatException: Input string was not in a correct format.
at System.Text.StringBuilder.FormatError()
at System.Text.StringBuilder.AppendFormat(IFormatProvider provider, String format, Object[] args)
at System.String.Format(IFormatProvider provider, String format, Object[] args)
at Microsoft.Samples.ReportingServices.CustomSecurity.Logon.ServerBtnLogon_Click(Object sender, EventArgs e) in C:Program FilesMicrosoft SQL Server90SamplesReporting ServicesExtension SamplesFormsAuthentication SamplecsFormsAuthenticationLogon.aspx.cs:line 130
at System.Web.UI.WebControls.Button.OnClick(EventArgs e)
at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)
at System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument)
at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)
at System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
--- End of inner exception stack trace ---
at System.Web.UI.Page.HandleError(Exception e)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest()
at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context)
at System.Web.UI.Page.ProcessRequest(HttpContext context)
at ASP.logon_aspx.ProcessRequest(HttpContext context)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
--- End of inner exception stack trace ---
aspnet_wp!library!18!03/13/2007-11:38:24:: i INFO: Exception dumped to: c:Program FilesMicrosoft SQL ServerMSSQL.3Reporting ServicesLogFiles flags= ReferencedMemory, AllThreads, SendToWatson
aspnet_wp!library!1!03/13/2007-11:39:11:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorException: The report server has encountered a configuration error. See the report server log files for more information., Could not load Authentication extension;
Info: Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorException: The report server has encountered a configuration error. See the report server log files for more information.



Am I missing something? Is this even possible? If not, then why isn't it possible?

It feels like I've been going round in circles on something that shouold be pretty trivial to configure.

Thanks in advance.

Adam.

View 9 Replies View Related

Security/Authentication Issue Web ReportManager

Mar 21, 2007

Wa have a user that comes over to our BI department, on a test-pc he logs in with his domain account, goes to the /Reports url and sees the report we prepared for his usercode. The virtual directories have Windows Authentication in IIS.

When he goes to his desk, where he is running with the same account he can't see these reports ....

What could be the problem and where should i start looking ??



Kind Regards

View 3 Replies View Related

SQL Security :: Windows Authentication Not Working With IP

Sep 17, 2015

This is for SQL Server 2005

When logged onto a server and connecting using windows authentication (either by server name or localhost) I am getting in fine, but when I connect using the IP I get the following error.

I can log in using SQL Server authentication with the IP.

View 2 Replies View Related

SQL Security :: Windows Authentication Login Is Created Automatically In DB

Apr 24, 2015

In my DB (SQL 2012) one windows authentication is created automatically and a schema is created exactly automatically that this user is owner of this schema. (e.g the user is domainx and schema exactly domainx).

I created a DDL Trigger on my DB to find out who and how it is created , but I didn't get any useful information.

I change the owner of schema that I can delete the schema and after that delete the user, and sometimes because the user is owner of a service , I have to alter the owner of the service to DBO and delete the user , but again and again exactly this user and schema (e.g domaninx ) are created as soon as I delete it.

I have read these topics : [URL] .... and [URL] .... but can't solve my problem.

View 10 Replies View Related

SQL Security :: Create Linked Server Using Windows Authentication

Sep 9, 2015

I have two SQL Server machines - RPTPROD and DATAPROD.

I wanted to create a linked server from RPTPROD pointing to DATAPROD using Windows Authentication.  When I tried to create this linked server, I keep getting this error

"Login failed for user 'NT AUTHORITYANNOYMOUS LOGON' (Microsoft SQL Server,Error: 18456)".  

On the "Security" page, I chose "Be made using the login's current security context".   I'm sysadmin on both SQL Server machines.  

View 3 Replies View Related

Custom Security Extension - Authorization Questions Using Forms Authentication

Nov 9, 2007

Greetings. I have developed our own custom security extension, implemented forms based authentication, and can authenticate from report manager, report server and sql studio. So far so good.

However, when it comes to Authorization, i'm unclear in a few areas and would appreciate if someone could help me out with the following questions. It should be noted that in the code I have granted an administrator user full access to all operations and permissions, and then tested against both an administrator user and a normal user.


IAuthorizationExtension.GetPermissions summary says

"Returns the set of permissions granted a specific user for an item in the report server database."

Inparticular, the secDesc parameter is supposed to contain the security descriptor associated with the item.

However, with our extension this parameter is always null, even if I have already granted access for a user, which is confirmed through logging in CreateSecurityDescriptor.

Through the report manager or sql studio I can see that the permissions have been created, so I can't understand why I never see them in the GetPermissions method? This then (seems to) flow through to the various CheckAccess methods, where the users are authenticated, but are not authorized to perform any operations. i.e. in report manager a user has no folders or reports available.


Is RS authorization designed around the concept that the details will always be stored in it's own database?

Ideally, we'd like to have the various roles, users and function authorizations defined in our own security framework. This is working great for the authentication aspect of the extension, but unless there is a mechanism which exposes the details of the particular authorization process (e.g. the name of the folder being viewed or report being run), then I can't see a way we can implement it. Unless i'm missing something fundamental of course!


Using Report Builder as the Administrator user (or any other user), I can see no data models available, even though I have created them via Report Manager, and I get the following exception trying to open up the list of reports:

System.Web.Services.Protocols.SoapException: The permissions granted to user '' are insufficient for performing this operation. ---> Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user '' are insufficient for performing this operation. at Microsoft.ReportingServices.Library.ListChildrenAction.PerformActionNow() at Microsoft.ReportingServices.Library.RSSoapAction.Execute() at Microsoft.ReportingServices.WebServer.ReportingService2005.ListChildren(String Item, Boolean Recursive, CatalogItem[]& CatalogItems)

I have implemented a report server proxy (inherited from ReportService2005) as per the example, to pass through the authorization cookie. Any clues as to what could be wrong?

Finally, I suspect part of my problem may be in assignment of users to System Roles ("System Administrator" and "System User"), I'm not sure if these are meant only for Windows Authentication? I can see no way of assigning these roles to any of my users using Forms Authentication.

Thanks for any help or advice you can give!

View 25 Replies View Related

Basic Authentication Vs Security Extension For Internet/Xtranet RS Access

Dec 19, 2007

does anybody know why MS doesnt consider Basic Authentication a viable solution for Inter/Xtra net access to RS? I'm re reading the documentation at http://msdn2.microsoft.com/en-us/library/bb283249.aspx but so far am not getting what the Security Extension options accomplish that can't be accomplished with much less effort using some form of Basic Authentication.

View 25 Replies View Related

Connection Lockout

Oct 24, 1999

I have a custom application running against sql7 that has twice "locked up" sql7. The locked up symptom is that sql 7 will not allow any connections,
even from enterprise manager (server xxxxx is not responding........). The application returns an error that says the
"xxxxx" database is not available, using master instead. A look at the NT event log and the sql7 log provide no help. The OS is running fine and
existing connections (by the application) are still allowing database writes. How do trap what is causing sql7 to stop responding to connection
requests. I am presently starting and stopping the mssql service to get things running, but I really need a root cause. Any troubleshooting tips for
this would be greatly appreciated. Thanks in advance!

View 1 Replies View Related

User Lockout

Feb 11, 2008

Can anyone tell me how a user gets lockedout in sql 2005. ?

View 4 Replies View Related

Transaction Lockout Of Reads

Aug 28, 2006

Hi,

I have been seeing a basic scenario of a write transaction appearing to unexpectedly lock-out reading.

The database has isolation set to "READ COMMITTED".

The scenario is:

1.) Start a transaction (for doing a write)

2.) Do a read before the transaction (for doing the write) is committed (e.g. sqlCommand2.ExecuteReader()).

--> the code will appear to lock-up (then time out).

I see the same behavior if I step through the "write" code with the debugger (to a point after the transaction is started, but before it is committed), and run a "SELECT * FROM" type query from Microsoft SqlServer Management Studio.

Following is the code sample demonstates the issue.

Thoughts on how to resolve the issue (to let me do "read committed" reading of the database table)?

Thanks!

Andy







Module Transaction

Sub Main()

Dim exception1 As Exception

Try

' Create/Open Database Connection

Dim sqlConnection1 As New System.Data.SqlClient.SqlConnection("Server=GRB-AB;Database=Transaction;Trusted_Connection=True;")

sqlConnection1.Open()

' Start transaction

Dim sqlTransaction1 As System.Data.SqlClient.SqlTransaction = sqlConnection1.BeginTransaction()

' Set Parent record

Dim sqlCommand1 As New System.Data.SqlClient.SqlCommand("INSERT INTO Parent (Name) VALUES ('ParentValue');", sqlConnection1)

sqlCommand1.Transaction = sqlTransaction1

sqlCommand1.ExecuteNonQuery()

' Get Id from parent record (note: this code assumes the table was empty when this program starts)

sqlCommand1 = New System.Data.SqlClient.SqlCommand("SELECT Id FROM Parent;", sqlConnection1)

sqlCommand1.Transaction = sqlTransaction1

Dim parentId As Integer = CType(sqlCommand1.ExecuteScalar(), Integer)



'

' Do reading test to test concurrently reading table being written to

'

' Create/Open Database Connection for reading test

Dim sqlConnection2 As New System.Data.SqlClient.SqlConnection("Server=GRB-AB;Database=Transaction;Trusted_Connection=True;")

sqlConnection2.Open()

Dim sqlCommand2 As New System.Data.SqlClient.SqlCommand("SELECT Id FROM Parent;", sqlConnection2)

sqlCommand2.ExecuteReader()

Dim i As Integer

While (sqlCommand2.ExecuteReader.Read = True) ' <===== LOCKS UP HERE **************

i = i + 1

End While

'

' End reading test

'



' Set child record

sqlCommand1 = New System.Data.SqlClient.SqlCommand( _

"INSERT INTO Child (Name, ParentId) VALUES ('ChildValue', " & parentId.ToString & ");", sqlConnection1)

sqlCommand1.Transaction = sqlTransaction1

sqlCommand1.ExecuteScalar()

' Either 1.) commit transaction OR 2.) rollback transaction

Dim test As Boolean = False

If test = False Then

sqlTransaction1.Commit()

Else

sqlTransaction1.Rollback()

End If

sqlConnection1.Close()

sqlConnection2.Close()

Catch ex As Exception

exception1 = ex

End Try

End Sub

End Module

View 1 Replies View Related

Account Lockout Problem With Sp_send_dbmail

Sep 1, 2006

I am running this code in a job:

EXEC msdb.[dbo].sp_send_dbmail
@profile_name = 'Blah Blah',
@recipients = 'blah@blah.com',
@subject = 'Server Report 1',
@body = '',
@execute_query_database = 'DBInfo',
@query = 'EXEC dbo.usp_SvrRpt1;',
@query_result_header = 0,
@query_result_width = 300,
--@attach_query_result_as_file = 1,
@query_result_separator = '';
GO

Because I am creating a total of 6 server reports, I alter the subject and query like so:

@subject = 'Server Report X' --where X is replaced with values 1 to 6
@query = 'EXEC dbo.usp_SvrRptX' --where X is replaced with values 1 to 6

I can run 4 reports without any problems. If I run more than 4 reports in the same batch, my network account under Windows 2000 Activity Directory is locked out as if I had erroneously mistyped my password the number of time to meet the lockout requirement - in this case, the number is 3 login tries.

Is this a known problem with Database Mail? If so, is there a fix or workaround?

Thanks,

Neal

View 8 Replies View Related

Transact SQL :: Lockout Time In Milliseconds

Dec 1, 2015

why does select @@lock_timeout return -1. Shouldn't this return lock timeout in milliseconds?

View 2 Replies View Related

Unable To Connect To SQL Server EndPoint Through SQL Server Authentication Using WS-Security Header

May 14, 2008

Hi folks,

I have created an EndPoint in SQL Server 2005 as per the code below.


CREATE ENDPOINT OSTC_LMS_Endpoint

AUTHORIZATION LMSEndPointUsers

STATE = STARTED

AS HTTP(

PATH = '/ostc_sql_endpoint',

AUTHENTICATION = (BASIC),

PORTS = (SSL),

SITE = 'OSTC-DEV-001'

)

FOR SOAP (

WEBMETHOD 'ostc_SQLSoapTester'

(name='OSTC_LMS_06.dbo.ostc_SQLSoapTester',

FORMAT = ROWSETS_ONLY,

SCHEMA=STANDARD),

WSDL = DEFAULT,

LOGIN_TYPE = MIXED,

SCHEMA = STANDARD,

DATABASE = 'OSTC_LMS_06',

NAMESPACE = 'http://tempUri.org/'

)

GO

USE master

GRANT CONNECT ON ENDPOINT::OSTC_LMS_Endpoint

TO [LMSEndPointUsers]

GO

USE master

GRANT CONNECT ON ENDPOINT::OSTC_LMS_Endpoint

TO [ostc-dev-001endPointUsers]

GO

-----------------------------------------------------------------------------------------------------------------
The SPROC being exposed as the webmethod: -


USE OSTC_LMS_06

IF EXISTS (SELECT name FROM sysobjects

WHERE name = 'ostc_SQLSoapTester' AND type = 'P')

DROP PROCEDURE ostc_SQLSoapTester

GO

CREATE PROCEDURE ostc_SQLSoapTester

@UsersId char(12)

AS

SET NOCOUNT ON

SELECT FIRST_NAME,FAMILY_NAME

FROM USERS

WHERE USERS_ID = @UsersId

GO



USE OSTC_LMS_06

GRANT EXECUTE ON ostc_SQLSoapTester

TO LMSEndPointUsers

GO

USE OSTC_LMS_06

GRANT EXECUTE ON ostc_SQLSoapTester

TO [ostc-dev-001endPointUsers]

GO

----------------------------------------------------------------------------------------------------------------

The computer in question is our dev server and is running as a workgroup machine with the following: -
Win Server 2003
SQL Server 2005
.net Framework 2.0
No firewalls or Proxies are in the way.

The computer has to be as a workgroup machine to reflect our live server.

The user LMSEndPointUsers is a SQL Server Login
The user ostc-dev-001endPointUsers is a machine login

We have employed the Security class as per the information given in the SQL Server documentation with the intention of using the WS-Security headers that apparently are to be used when trying to authenticate using a SQL Server login.

----------------------------------------------------------------------------------------------------------------

Code used to connect and try and reciev the dataset.


string sUserName = "userName";

string sPassword = "Password";



LMS_Endpoint.OSTC_LMS_Endpoint wsSQLTester = new LMS_Endpoint.OSTC_LMS_Endpoint();

SqlSoapHeader.Security sqlSec = new SqlSoapHeader.Security();

sqlSec.Username = sUserName;

sqlSec.Password = sPassword;

XmlWriter writer = XmlWriter.Create("Security.xml");

writer.WriteStartElement("security");

sqlSec.WriteXml(writer);

wsSQLTester.sqlSecurity = sqlSec;


DataSet dsMySet = wsSQLTester.ostc_SQLSoapTester("RH6915145507");


Basically authorization is denied 401.
Hope someone can help here as have tearing my hair out.

Thanks in advance

View 2 Replies View Related

In SqlServer Management Studio Express, Server Type Option Is Greyed Out, Also Publication Option Missing

Apr 27, 2008

Hi everyone In my SqlServer Management Studio Express, on start up it shows the server type option, but greyed.So that value is fixed to database engine. ( I'm trying to work on an SqlServer Compact Edition database through the SSMStudiothat's why I'm trying to get this to change.)Besides, after I connect i go to the Object Explorer, expand the server node, and go to Replication.When i expand replication, i get the "Local Subscription" option, but nothng for Publication.( I want to work on Merge Replication, that's why I desparately need Publication to work)Am i missing something here? I did not install SqlServer separately, I only have what comes bundled with the Visual Studio  2005 Setup.

View 2 Replies View Related

SQL Sever 2005 Express Move Windowns Authentication Choice To Mixed Authentication

Aug 22, 2007

I folks.I Have installed sql server 2005 express and choosed windowsauthentication on instalation, but i make a mistake and now i needmixed authentication, how can i modify this whithout uninstall andinstall again the application?thanks for the help.

View 2 Replies View Related

How To Give Authentication For Send Mail Task Component? [not Default Windows Authentication]

May 11, 2007

How to give authentication for Send Mail Task component?

View 4 Replies View Related

SQL 2012 :: Configuring Memory Per Query Option And Index Create Memory Option

Feb 10, 2015

So I started a new job recently and have noticed a few strange configurations. Typically I would never mess with min memory per query option and index create memory option configuration because i just haven't seen any need to. My typical thought is that if it isn't broke... They have been modified on every single server in my environment.

From Books Online:
• This option is an advanced option and should be changed only by an experienced database administrator or certified SQL Server technician.
• The index create memory option is self-configuring and usually works without requiring adjustment. However, if you experience difficulties creating indexes, consider increasing the value of this option from its run value.

View 3 Replies View Related

Switching SQL 2005 Authentication Mode From Windows To SQL Authentication

Apr 18, 2007

Hi there,I have installed MS SQL Server 2005 on my machine with windows authentication. But now I want to switch the authentication mode to SQL Authentication. I am unable to switch, I can’t find the proper way to do so here in 2005.Could any one help me in doing this?Thank you,-Ahsan

View 1 Replies View Related

Sql Authentication = Fast./ Windows Authentication = V.slow!

Mar 25, 2004

Hello,

(Using win2k, sqlserver2k, framework 1.1)
I have an fairly data-heavy application that uses Windows authentication (Trusted connection/aspnet account) to connect to Sql Server. The site uses IIS basic authentication.

On the dev server everything works fine but when I move to the live server things get strange and it starts to crawl along. (Pages load OK but then it just crawls as it loads the datagrids etc. Sometimes it brings back incomplete/incorrect data )

BUT When I use Sql Authentication to connect to Sql Server and there is no problem at all!

Ok, there is something obviously wrong with the live server (which is identical setup to dev)but I dont know where to start.

Any ideas??

View 2 Replies View Related

Using SQL Authentication And Windows Integrated Authentication Concurrently

May 15, 2006

Hi all,

I've got two applications which both have a database on my MS SQL 2000 server. The problem is, one application must use Windows Integrated Authentication (which it is currently using and cannot be changed) whilst the other application which I'm trying to configure must use a SQL password.

Since the server has already been configured to use Windows Integrated Authentication for the existing database and application, how do I configure the other database to use the SQL password?

Thanks.

View 1 Replies View Related

Authentication An Application Using Windows Integrated Authentication

May 12, 2006

Hi all,

My work is using a shared application
which accesses a MSSQL 2000 database. To access the application, the
folder on the Windows 2003 Server is shared and users can access the
folder through a shared drive.


For the application to access the
database, it uses an ODBC connection to the MSSQL server which
originally used the SA password.


We have recently switched to using
Windows Integrated Authentication because we believe it offers a
higher level of security. However the only way in which we have been
able to enable this is to add the windows users to the SQL server.


The problem with this is that the
application sets permissions for individual users on what records
they can see within the database. We have found that by adding the
windows users to the SQL Server, they can bypass the permissions the
set by the application by simply using any application that can use
an ODBC connection, such as Enterprise Manager, and see all the
database.

One way around this would be to set up
domains of users with access privileges to the tables which reflect
the permissions set by the application, and configuring a view of the
data so they may only see the records that they have permissions to.
However to do this would require a high administrative cost to ensure
that changes made in the application are reflected in the privileges
of the SQL server.

Instead, is there a way the SQL server
can authenticate that the ODBC connection is coming from the correct
application using Windows Integrated Authentication?

This would allow the applcation to
determine security, and stop users from connecting to the SQL server
using other applications.

Alternatively, can the SQL server,
using Windows Integrated Authentication, also ask the application to
supply a username and password?

Any help with this matter would be
greatly appreciated.

Thanks!

View 4 Replies View Related

Switching From SQL Authentication To Integrated Authentication?

Aug 25, 2006

Hi,I'm using SQL Server 2005. My Connection String looks like that at the moment: <add name="LocalSqlServer" connectionString="Data Source=xx;Initial Catalog=xx;Persist Security Info=True;User ID=xx;Password=xx" providerName="System.Data.SqlClient"/>    Now I'd like to change this kind of authentication to Integrated Windows AuthenticationI added the WorkerProcess IIS_WPG to the permitted Users but it didn't help.Changed the Connection String to this:connectionString="Server=xx;Database=xx;Trusted_Connection=True;"All I'm getting is that my NetworkService is not permitted to access DB when I try to connect to the DB in ASP.NET.How can I properly configure that? Thanks!

View 4 Replies View Related

Difference Between Sql Authentication And Windows Authentication

May 8, 2003

Hello

Can anyone tell me what is the difference between sql authentication and windows authentication.

Examples of each would be very useful

Many thanks in advance

Steve

View 2 Replies View Related

SQL Server Authentication Vs Windows Authentication

Oct 16, 2006

Would anyone please help me out here. which of the 2 modes of authentication is better and why??

View 3 Replies View Related

Using Windows Authentication V/s Mixed Authentication

Dec 18, 2006

Hi,

Say, I have configured my SQL to use Mixed Authentication. Now, I have a applicaiton which uses my SQL Server. The application just creates a database in SQL Server and uses the database to store its information.

This application also has a SYSTEM DSN under ODBC through which it accesses the database. For the application to access this database, should I only use SA (as my SQL instance is configured to use Mixed Authentication) or can I use Windows Authentcation too...

If I should only use SA, do we have a documentation which talks about this.

Thanks
Santhosh

View 1 Replies View Related

Windows Authentication Vs SQL Server Authentication

Mar 12, 2008



For using different services of SQL SERVER 2005 which is better...
Windows Authentication or SQL Server Authentication?
what are the advantages and disadvantages of both?

View 5 Replies View Related

Report Manager With Forms Authentication. Report Server With Windows Authentication.

Feb 1, 2008

Hi.

I wonder if it is possible to set forms authentication for report manager but leave report server "as it is". I need to authenticate users from external LDAP and can't use windows authentication for report manager, but I would also like to leave report server open for anonymous users. In that way authenticated administrators could create reports which anonymous users could read.

I tested the Security Extension Sample and got it working when I rewrote the authentication part with my own LDAP authentication.

If I have understood correctly, the report manager is just application inside report server so is it possible to use forms authentication with one application but still leave the report server with Windows authentication?

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved