Impersonation and double hop

Hello,



I need a little advice in figuring out the right solution for a problem that
I am facing. I have a 3 tier application. Client, Web Service middle layer,
and SQL Server. I have been using a trusted account to get from the WS to
SQL, but now I have new requirements for getting user credentials all the
way to SQL Server. I was under the impression that by passing the user login
name and password to the middle layer, it could impersonate the user and do
a single hop to the SQL Server machine.



Unfortunately, this appears to still be a double hop scenario, even though
the middle layer has the username and password required for the domain
account. Is this correct?



And if that is the case, I suppose my only solution is to use Kerberos
delegation, which I am concerned that a highly competent and security
obsessed IT staff will refuse to set up for us during an onsite customer
implementation.



Am I missing any pieces to the puzzle? Any advice would be appreciated.



Thanks,



Glenn


.

Relevant Pages

  • Re: Architecture Advice
    ... >> I'm going to be using SQL Server for a distributed ... >> application and I'd appreciate any advice on architecture. ... >> Simplest approach would be 2-tier client server and be done with it. ... it would be nice to be able to provide some data caching at the ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: What do I need to use Terminal Server?
    ... It's taken as offered and all good advice. ... I'm starting to see some major modifications to the overall network setup ... Then, based on what I found in #1, I would order the proper hardware ... and software for you - server, workstations, SQL Server if required, ...
    (microsoft.public.windowsxp.general)
  • Re: Error 823
    ... You've already gotten some advice, ... Tibor Karaszi, SQL Server MVP ... we've delivered the Raid System to a Recovery company. ... > I/O error detected during read at offset 0x0000001ef3c000 in ...
    (microsoft.public.sqlserver.setup)
  • Re: newbie question - local queries
    ... Thanks for the advice. ... newbie would pretty much give the idea, that, I am a NEWBIE... ... I have never used SQL Server, but have started reading and studying it. ... local workstation. ...
    (microsoft.public.access.adp.sqlserver)
  • Re: Generated fields in CE table
    ... This may have been the most valuable piece of advice I have ever gotten in ... this whole mess. ... Please reference this one C:\Program Files\Microsoft Visual ... >> an article to the publication on the SQL server using enterprise manager. ...
    (microsoft.public.sqlserver.ce)