How do I add a photo to my comment or blog entry?
IIS and SQL Server 2000 Windows Authentication
Hello Guest
  
  • Login
• Register…
• Start blog
  • Who, Where, When
• What can I do?
• What to Read?
  • Polls
• Avatars
• Interests
  • Cities and Countries
• Random blog
• Users search
  • Search
• Games
• Tests
• QAIX
  • Сообщества
• Talxy Chat
• Horoscope
• Online
 
Зарегистрируйся!

QAIX > ASP web-programming > IIS and SQL Server 2000 Windows Authentication 4 September 2008 11:02:55

  Recent blog posts: 
  Forums:   
  Discuss: 
  Recent forum topics: 
  Recent forum comments:
  Moderators:

IIS and SQL Server 2000 Windows Authentication

John Barr 4 September 2008 11:02:55
 We have asp.net application setup using Windows Authentication. For the
website, under directory security the only thing checked is "Windows
Authentication". We have the users specified in SQL who have rights to
connect...etc. In the Web.Config, it is specified as Integrated
Security=true. However, when the user goes to the site, an error message is
displayed saying Login attempt failed for (Our Domain Name)\(Our Web
Application Server Name)$ . I have a couple of issues here...

1. Why is it attempting to logon with this account?

2. The domain Machine name doesnt have a $ on it, so why is it showing that
way?

3. Is this some internal naming for a windows account?

Add comment
Bob Barrows 3 September 2008 17:39:32 permanent link ]
 John Barr wrote:
We have asp.net

There was no way for you to know it (except maybe by browsing through
some of the previous questions before posting yours - always a
recommended practice), but this is a classic (COM-based) asp newsgroup.
ASP.Net is a different technology from classic ASP. While you may be
lucky enough to find a dotnet-savvy person here who can answer your
question, you can eliminate the luck factor by posting your question to
a newsgroup where the dotnet-savvy people hang out. I suggest

microsoft.public.do­tnet.framework.aspne­t.

There are also forums at www.asp.net where you can find a lot of people
to help you.

HTH,
Bob Barrows

--
Microsoft MVP -- ASP/ASP.NET
Please reply to the newsgroup. The email account listed in my From
header is my spam trap, so I don't check it very often. You will get a
quicker response by posting to the newsgroup.


Add comment
Anthony Jones 4 September 2008 11:02:55 permanent link ]
 "John Barr" <JohnBarr@discussio­ns.microsoft.com> wrote in message
news:582BA4BC-C27F-­483E-9626-2FC178E01B­CB@microsoft.com...
We have asp.net application setup using Windows Authentication. For the
website, under directory security the only thing checked is "Windows
Authentication". We have the users specified in SQL who have rights to
connect...etc. In the Web.Config, it is specified as Integrated
Security=true. However, when the user goes to the site, an error message
is
displayed saying Login attempt failed for (Our Domain Name)\(Our Web
Application Server Name)$ . I have a couple of issues here...
1. Why is it attempting to logon with this account?

Because you haven't specified:-

<identity impersonate="true" />

in the <system.web> section.

The authenticated user is purely a .NET IPrinicple and does not impact the
security token that the thread runs as.
In order for an integrated security to pass through to a SQL connection the
thread needs to impersonate the windows account of the the user. The above
entry causes that to happen.

2. The domain Machine name doesnt have a $ on it, so why is it showing
that
way?

It is a bit strange but it will the machine account that is trying to access
the SQL server because the default identity on the process will be NETWORK
SERVICE

3. Is this some internal naming for a windows account?

Yes but I don't think the $ really means much.


--
Anthony Jones - MVP ASP/ASP.NET

Add comment
 

Add new comment

As:
Login:  Password:  
 
 
  
 
Пожалуйста, относитесь к собеседникам уважительно, не используйте нецензурные слова, не злоупотребляйте заглавными буквами, не публикуйте рекламу и объявления о купле/продаже, а также материалы нарушающие сетевой этикет или УК РФ.


QAIX > ASP web-programming > IIS and SQL Server 2000 Windows Authentication 4 September 2008 11:02:55

see also:
[JBoss Seam] - Re: commandLink not…
[Persistence, JBoss/CMP…
[JBoss Seam] - Re: DataModelSelection…
пройди тесты:
see also:
How to transfer DRM protected iTunes…
Transfer iTunes Library to Zune
How to convert iTunes Plus to MP3?

  Copyright © 2001—2008 QAIX
Idea: Miсhael Monashev
Помощь и задать вопросы можно в сообществе support.qaix.com.
Сообщения об ошибках оставляем в сообществе bugs.qaix.com.
Предложения и комментарии пишем в сообществе suggest.qaix.com.
Информация для родителей.
Write us at:
If you would like to report an abuse of our service, such as a spam message, please .