Re: SQL - Login falied, user null error w SSPI

From: Ramiro Calderon Romero (rcrdev@hotmail.com)
Date: 03/02/03

  • Next message: rgopalan: "ViewState across history of the same page."
    From: "Ramiro Calderon Romero" <rcrdev@hotmail.com>
    Date: Sun, 2 Mar 2003 15:21:53 -0500
    
    

    Hi,

    "ShikariShambu" <shikarishambu70@hotmail.com> wrote in message
    news:exBwjJP4CHA.1808@TK2MSFTNGP12.phx.gbl...
    >
    >
    > The connection string for the DB in web.config looks like this
    > <add key="ConnectionString" value="Data Source=DBServer;Initial
    > Catalog=DBName;Integrated Security=SSPI" />
    >
    > The authenitcation mode in web.config is set to windows
    > <authentication mode="Windows" />
    >
    > And in IIS Admin the authentication for the site is
    > 1) Anonymous access
    > configured to use a specific domain account that has database
    > rights. Removed allow IIS to manage password.
    > 2) Integrated Windows Authentication
    >
    > The issue I have is - since I want all database access done thru' a
    > particular account I can't user impersoante = true in web.config.
    >

    Since you have the anonymous access enabled, when you use identity
    impersonate=true the identity that flows to aspnet_wp.exe is the same
    account that you use for anonymous access in your web site.

    > I don't understand why the user id that the process is trying is use is
    not> part of the message.> > If I set impersonate=true in web.config it does
    come with an error> domain1\user1 does not have db access or something to
    that effect.

    You can also specify the credentials you want to use for impersonating

    <identity impersonate="true|false"
              userName="username"
              password="password"/>
    As you can see, you have to put the password in the .config which is not so
    nice.
    Hope this helps

    > TIA
    >
    >
    > "Mike Parisi" <mparisi2@rochester.rr.com> wrote in message
    > news:hSr8a.126454$9U3.38360@twister.nyroc.rr.com...
    > > Well your question has a thousand possible setups and solutions. You
    need
    > > to give the ASP.NET (or associated domain account) user account access
    to
    > > the database.... WITHIN THAT DATABASE, you can limit access to Select,
    > > Insert, Execute, etc... If you want to set specific specific groups to
    > > account status, then you have to do the same thing except with the user
    > > accounts! Also make sure in the DB USER and Policy sections are
    > correct...
    > > Without more details, like connection strings and user settings people
    > wont
    > > be able to answer your problems. This error message is very general...
    > >
    > > P.S. Windows Authentication only works in IE... NO OTHER BROWSERS!
    > >
    > > Maybe you should add some more details about connection string, user
    > > accounts, and what your t
    > > "ShikariShambu" <shikarishambu70@hotmail.com> wrote in message
    > > news:ezFE0VO4CHA.2112@TK2MSFTNGP10.phx.gbl...
    > > > Hi,
    > > > I do n't want the ASPNET account to have access to the DB directly. I
    am
    > > > running the site under a domain account that has access to the
    database.
    > > >
    > > > The issue I seem to have is the context associated with the userid
    that
    > > the
    > > > website is running under is not being used or forwarded to the
    database
    > > > server.
    > > >
    > > > TIA
    > > >
    > > > "Mike Parisi" <mparisi2@rochester.rr.com> wrote in message
    > > > news:kgr8a.125981$9U3.72900@twister.nyroc.rr.com...
    > > > > Try going to Control Panel -> Admin Tools -> Computer Management...
    > > Thiss
    > > > > opens up the MMC
    > > > > IN XP Go to Services and Applications -> Microsoft SQL SERVER ->
    > > > (local) ->
    > > > > Security -> Login... rightclick MachineName\ASPNET (properties) goto
    > > > > Database Access (Tab) make sure that the database is permitted!
    > > > >
    > > > > "ShikariShambu" <shikarishambu70@hotmail.com> wrote in message
    > > > > news:Osa6p#N4CHA.2396@TK2MSFTNGP09.phx.gbl...
    > > > > > Hi,
    > > > > > I have an intranet site that is set to use integrated windows
    > > > > > authentication. For data access we are running the website under
    an
    > > > > account
    > > > > > that has privilege to access the DB( by setting the anonymous
    access
    > > > > account
    > > > > > in iisadmin for the site). However, when I try to run the site I
    get
    > > an
    > > > > > error saying
    > > > > >
    > > > > > Login failed for user '(null)'. Reason: Not associated with a
    > trusted
    > > > SQL
    > > > > > Server connection
    > > > > >
    > > > > > Appreciate any help in resolving the error.
    > > > > >
    > > > > > thanks
    > > > > >
    > > > > >
    > > > >
    > > > >
    > > >
    > > >
    > >
    > >
    >
    >

    ---
    Outgoing mail is certified Virus Free.
    Checked by AVG anti-virus system (http://www.grisoft.com).
    Version: 6.0.459 / Virus Database: 258 - Release Date: 2/25/2003
    


    Relevant Pages

    • Re: ASP.NET w/ Windows Integrated Authenitcation / DB Error
      ... Give the ASPNET account limited access permissions to the database ... > on their network login id (the authentication is seamless). ... I have the authentication mode set to windows in the ... > data access from the application to the DB is thru' a single account. ...
      (microsoft.public.dotnet.security)
    • Re: ASP.NET w/ Windows Integrated Authenitcation / DB Error
      ... Give the ASPNET account limited access permissions to the database ... > on their network login id (the authentication is seamless). ... I have the authentication mode set to windows in the ... > data access from the application to the DB is thru' a single account. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: How to prevent connection string from user?
      ... I directly send connection string to DB then another ... > can filter my account and password. ... When you want to connect with Windows authentication, ... the desired SQL Server login needs to be specified. ...
      (microsoft.public.sqlserver.security)
    • ASP.NET & Integrated Security setup?
      ... integrated security in your connection string. ... I tried this in test page to connect to the Northwind ... have it's own ASPNET-type account so it only has accesses ... Northwind site and the Northwind database) ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Help with connection string
      ... The connection string looks correct. ... Is that E drive accessible to the user account under whose context the ... IIS process is running (if your website has Anonymous enabled, ... connect to an unpassworded Access 2007 database for use in a small ...
      (microsoft.public.inetserver.asp.db)