Windows Authentication with IIS on separate machines

From: Ricardo Palmeira (palmeira@tce.pe.gov.br)
Date: 11/21/02


From: "Ricardo Palmeira" <palmeira@tce.pe.gov.br>
Date: Thu, 21 Nov 2002 03:09:34 -0800


Hi Brian,

Thanks for your help.

Yes, setting Basic Authentication in IIS works, but the
users must give their logins and passwords again.

Using Integrated Windows Authentication didn't work for
you?

Thanks,

>-----Original Message-----
>Hi Recardo
>I'm having the same problem but I think I have figured it
>out...at least this works for me
>This is what I have setup:
>Win2000 - IIS 5
>-Web Application is using Basic Authentication set in IIS
>-Added user account TESTUSER and gave read access to
>directory where web app files reside
>
>Win2000 - SQL 2000
>- added TESTUSER with same password
>- in MMC added Security Templates Snap in
>- ensured Log on Locally was set for users
>Console Root -> Security Templates->Setup Security->Local
>Policies -> User Rights Assignment ->Log on locally
>
>My connection string was passing the username and
>password to SQL server. This works if the user is created
>in SQL server but doesn't work if user account was
>imported from a Windows account.
>
>objDC.Open "Provider=MSDASQL.1;DRIVER={SQL Server};
>SERVER=xxx.xxx.xxx.xxx;DATABASE=Pubs;UID=TESTUSER;PWD=pwor
>d;Network Library=DBMSSOCN;"
>
>I removed UID and PWD in order to authenticate to the
>Windows account, now my data connection authenticates
>under all my imported windows accounts. If I monitor this
>in Computer Management -> Shared Folders -> Sessions I
>can see the users open sessions and queries...so I'm
>assuming this is working the way I want it to.
>
>For the accounts that were created in SQL Server, it
>tries to login as 'MYDB\Guest'.. (Guest SHOULD be
>disabled in the fist place)!
>
>Microsoft OLE DB Provider for ODBC Drivers
>error '80040e4d'
>[Microsoft][ODBC SQL Server Driver][SQL Server]Login
>failed for user 'MYDB\Guest'.
>
>
>Check out this KB article as well
>http://support.microsoft.com/default.aspx?scid=KB;EN-
>US;247931
>
>Ultimately you would want to centrally manage the users
>instead of adding the same account on multiple servers.
>Drop me an email if you wish to discuss this.
>Regards
>B
>
>>-----Original Message-----
>>Hi,
>>
>>We're trying to make our Intranet pages use Sql Server
>>Windows Authentication. We're using Windows 2000, with
>SQL
>>Server on one machine and the IIS on another.
>>
>>That only works when the user logs on the IIS Server,
>>otherwise we're receiving the error:
>>Microsoft OLE DB Provider for SQL Server
>error '80040e4d'
>>
>>Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
>>
>>When SQL and IIS are on the same machine everything ok.
>>
>>Thanks in advance.
>>
>>
>>
>>.
>>
>.
>



Relevant Pages

  • Re: Windows Authentication in asp.net 2005 to SQL Server?
    ... If the domains do not trust each other, Windows authentication is not going ... Basic authentication sometimes makes the need for Kerberos delegation go ... generic account to do the backend data stuff on our SQL Server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Windows Authentication method on IIS6
    ... The microsoft.public.windows.server.* groups deal with Windows 2003 ... The microsoft.public.inetserver.* groups deal with IIS ... > the authentication button, ... You can configure either one or multiple realm names on a server running IIS ...
    (microsoft.public.win2000.security)
  • Re: How to access Windows IIS User Info with Perl
    ... but the IIS server is configured for Windows ... allowed for Basic Authentication, Windows Authentication (or whatever ... Do you know if they are part of a standard ...
    (comp.lang.perl.misc)
  • Re: Remote connection failed
    ... If you are going over a remote connection or are not logging ... into the domain where SQL Server is then no, Windows ... authentication won't work. ...
    (microsoft.public.sqlserver.connect)
  • Re: Changing passwords / Blocking SA login attempts
    ... I went into the Server Config properties and changed to Windows ... My login for Start and Run SQL server was in this format. ... I am supposing this was an SQL authentication, ...
    (microsoft.public.sqlserver.security)