Re: Standalone IIS server access to sql in Domain



you didn't really answer my question - my i guess you are talking about authentication - like uisng integrated security from IIS to SQL??

There is no way to "trust" a domain from a non-domain machine - the only workaround is to replicate the account used on both ends.

That means you need an account on IIS (e.g. bob/foo) and the same account on the sql server machine.


-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

I want the IIS server to be standalone and have a oneway trust with
the AD in my lan. The SQL server belongs to the Active directory
domain in my lan the IIS server is a standalone server that resides in
my DMZ. I need the standalone to trust the domain but not allow the
domain to trust the standalone.

"Dominick Baier" wrote:

what do you mean with "trust" ?
-----
Dominick Baier (http://www.leastprivilege.com)
Developing More Secure Microsoft ASP.NET 2.0 Applications
(http://www.microsoft.com/mspress/books/9989.asp)

Here goes. We have a web server that needs to go into the DMZ. I
have a SQL server in my local lan attached to the domain. First
question.

Can I setup a oneway trust with the standalone server trusts the
domain.

Thanks.



.



Relevant Pages

  • Re: PROBLEM: ASP on IIS 5 secured via "Windows Integrated Authentication" accessing "
    ... uses NT group based permissons on the SQL Server, ... > transfered to the IIS box and IIS does a local logon. ... > delegation for all accounts. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Alternate to RDA
    ... Saves me a lot of time on researching. ... strict group and local policies rights, why was IIS chosen ... > I'm not aware of any other way to connect to SQL Server. ...
    (microsoft.public.dotnet.framework.compactframework)
  • Re: Active sync and SQL CE
    ... IIS is a requirement for either merge replication or RDA. ... ActiveSync to play with take a look at the Data Port line of products ... These work over ActiveSync to port SQL CE databases to ... and from SQL Server 2000 and Access. ...
    (microsoft.public.pocketpc.developer)
  • Re: PROBLEM: ASP on IIS 5 secured via "Windows Integrated Authentication" accessing "
    ... You can fix the problem by using IIS 6.0 on Windows.NET with Windows.NET ... Domain Controllers using constrained delegation - but I assume this is out ... > uses NT group based permissons on the SQL Server, ...
    (microsoft.public.inetserver.iis.security)
  • Re: SQL Server 2008 bulk load error
    ... Thanks for the detailed explanation (needed for me since I don't have "trust issues" up to ... You didn't say what SQL command that your user is executing, but I going to assume BULK ... Say that it *is* SQL Server ... The SQL server service is running under a domain account in domain A. ...
    (microsoft.public.sqlserver.server)