Re: "Access Denied" to sql server ....help...

From: dw (dw_at_noSpam.com)
Date: 08/20/03


Date: Wed, 20 Aug 2003 10:48:31 -0700


Chris...
I appreciate the help.

What I am tyring to accomplish (and hopefully I am
describing this clearly) is to allow a user, coming into
our web site from anywhere to access our login page,
which attempts to connect to the sql server (which exists
on the same machine as the web server...all on one box)
using the login and password that the user inputs on the
Login form.

When I test with my local machine (IIS locally, but
connecting to the sql server on the above mentioned box)
this works fine. I am able to successfully connect to
the sql server.

However, when the asp.net app is copied to the real web
server (which also has sql server on it)...this is where
we get the "Access Denied" message.

I am assuming...still...that this is a permissions
problem with the ASP.Net user account. Short of trying
anything else...I am thinking of un-installing IIS
and .Net and then re-installing to see if that cures this
problem.

thanks,
  dw
>-----Original Message-----
>Impersonation is for authentication to other resources -
which was what you
>talked about in your original post. You can do forms
authentication on
>ASP.NET while using impersonation, if that is your
question. But I thought
>the problem was an access denied on your SQL Server box?
That's what I was
>trying to help you with.
>
>--
>Chris Jackson
>Software Engineer
>Microsoft MVP - Windows XP
>Windows XP Associate Expert
>--
>"dw" <dw@noSpam.com> wrote in message
>news:032b01c36692$45a6bf00$a501280a@phx.gbl...
>> Chris...thanks for the feedback. I'll check out that
>> link. I might not have been clear in my question, but
I
>> don't think that I want to authenticate to a different
>> box. What needs to happen...is if someone browses to
>> this web site (from anywhere) they can input their user
>> login and password and once they're authenticated, they
>> can access the rest of the asp.net app. Shouldn't the
>> local asp.net user account on this server allow me to
do
>> that? Or, do I still need to configure my app for
>> impersonation?
>>
>> thank you,
>> dw
>>
>> >-----Original Message-----
>> >The ASP.NET user account is a local account. You
should
>> configure your
>> >application to use impersonation to obtain domain
>> account credentials if you
>> >want to authenticate to a different box. The identity
>> matrix can be found
>> >here:
>> >http://msdn.microsoft.com/library/default.asp?
>> url=/library/en-us/dnnetsec/html/SecNetAP05.asp
>> >
>> >--
>> >Chris Jackson
>> >Software Engineer
>> >Microsoft MVP - Windows XP
>> >Windows XP Associate Expert
>> >--
>> >"dw" <dw@noSpam.com> wrote in message
>> >news:014f01c36684$5ad43a00$a601280a@phx.gbl...
>> >> Hello...
>> >> I created an asp.net app that works great on my
local
>> >> workstation. We are using forms based
authentication
>> and
>> >> I use the localhost IIS and a Sql Server on a
different
>> >> server. The login page accepts a username and
password
>> >> and then attempts to open a connection to the sql
>> >> server. As I wrote, this works fine on my machine.
>> >> However, now that the asp.net app has been copied to
>> our
>> >> server....I get an error that access is denied or
that
>> >> the sql server does not exist. I looked through
all of
>> >> the msdn articles and various web sites to find a
>> >> solution...and none of them have helped. I made
sure
>> to
>> >> add the Asp.net user account to my sql server and
set
>> its
>> >> database permissions accordingly...yet still this
error
>> >> persists.
>> >>
>> >> Does anyone have any thoughts or suggestions?
>> >>
>> >> thanks in advance,
>> >> dw
>> >
>> >
>> >.
>> >
>
>
>.
>



Relevant Pages

  • Re: Cant Connect
    ... Then it's likely the authentication settings on the IIS side ... Try adding the IUSR account as a login in SQL Server ... > Cn.open CnStr ...
    (microsoft.public.sqlserver.connect)
  • Re:changing sa password / login
    ... authentication and it worked. ... >I think you might have made changes to SQL Server ... >Authentication" can not recognize SA login which is SQL ... >configuration to use mixed authentication. ...
    (microsoft.public.sqlserver.security)
  • Re: Security question ..
    ... > If you use NT authentication, a user's permissions to a database are ... Your assertion that a user's permissions are independent of the application ... Even using Access and "exploring" will require an ODBC login to SQL Server. ...
    (microsoft.public.sqlserver.server)
  • Re:changing sa password / login
    ... I think you might have made changes to SQL Server ... to make was using Mixed Authentication which will ... Authentication" can not recognize SA login which is SQL ... configuration to use mixed authentication. ...
    (microsoft.public.sqlserver.security)
  • Re: Kerberos / Authentication to SQL2K
    ... use Windows integrated security for database access. ... That SQL Server be running on the same computer as IIS. ... > authentication until I switched on impersonation either. ... > When set up on my web server however, I get the "Login failed for user ...
    (microsoft.public.dotnet.framework.aspnet)