Re: Login failed for user ''. The user is not associated with a trusted SQL Server connection.



he never mentioned he is impersonating in asp.net - so no delegation needed. Cassini runs with the credentials of the interactive user - which seems to have access to sql - in contrast to the local ASPNET account - which i am trying to tell him since 2 days....

yes - use explicit credentials and enable mixed mode auth in sql server to get this to work.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

I assume when you used filesystem, you had IE running on the same box
as the web server so there was just a single hop for authentication
and thus delegation was not needed. I also assume filesystem runs
with your credentials - not ASPUSER but I'm not an expert on ASP.Net.
Your problem could be either ASPUSER not having permissions or
delegation. The easiest solution for either one is to setup a SQL
Server authenticated login and try connecting by putting the user name
and password in the connection string. If that works you at least know
what the problem is and can try to address it.

<CLarkou@xxxxxxxxx> wrote in message
news:1142922538.964796.18230@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

I tried creating a website with FILE SYSTEM, not HTTP, and I was able
to open the web page in IE with SQL server data. ASPUSER is used for
connecting to the SQL SERVER machine with FILE SYSTEM web site ?



.



Relevant Pages

  • Re: Balancing security needs in ADO.NET applications
    ... See my article http://www.developer.com/db/article.php/3693236 that shows how to put together a hierarchical TableAdapter using SPs. ... Hitchhiker's Guide to Visual Studio and SQL Server ... SQL Server credentials or the application's logon/pw. ... all they can do is run specific SPs that carefully guard the data and do not permit gross operations like dropping tables or changing rights. ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: PROBLEM: ASP on IIS 5 secured via "Windows Integrated Authentication" accessing "
    ... uses NT group based permissons on the SQL Server, ... > transfered to the IIS box and IIS does a local logon. ... > delegation for all accounts. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Constrained delegation question!
    ... for SQL Server access so I have an SPN for my DNS/IIS App Pool Identity. ... Active Directory under the delegation tab, ... SQL Server SPN for. ... If you are getting Kerberos authentication to the remote machine, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: sql2005/linked server+imperonate
    ... When you go from the first SQL Server to the second SQL ... Active Directory attempts to use Kerberos as the authentication method first. ... so through delegation, but you have to do some setup. ...
    (microsoft.public.de.sqlserver)
  • Re: Impersonation/Delegation security considerations
    ... Our AD/network guys illustrated a potential security issue using the ... I assume that by delegation you mean passing ... only pass user's credentials to a SQL Server running on the same machine. ... Web site to the CEO ...
    (microsoft.public.dotnet.framework.aspnet.security)