Re: perplexing SQL authentication from ASP.net issue

From: Russ Bjorgaard (russ@acordiamn.com)
Date: 09/13/02


From: "Russ Bjorgaard" <russ@acordiamn.com>
Date: Fri, 13 Sep 2002 10:17:01 -0500


First thing make sure in the Web.Config file that these settings are in
there:

//So that your application uses window integrated security
<authentication mode="Windows" />

//Identity impersonate so users on your intranet app are getting permissions
from their username and not trying to use the ASP.NET security account

<identity impersonate="true" />

Unless security is a very big issue on your intranet I do not think I would
add the extra headache of hiding my conn string in the web config especially
if you are using code behind(since it is compiled on the server anyway). I
do it for internet apps, but not for intranet. The problem you are having is
a common one I think, I hope it is resolved soon.



Relevant Pages