Re: Active directory control of SQL/WEB users security
From: John Warren (jwarren_at_prudentrx.com)
Date: 09/03/03
- Next message: Gene: "Audit Logs"
- Previous message: Tom Moreau: "Re: sp_delete_backuphistory script"
- In reply to: Tom Kaminski [MVP]: "Re: Active directory control of SQL/WEB users security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 3 Sep 2003 12:53:16 -0700
>-----Original Message-----
>"John Warren" <jwarren@prudentrx.com> wrote in message
>news:0dff01c37234$34c61b10$a601280a@phx.gbl...
>> We are looking at what to use to control users security
>> through WEB apps connected to a SQL2K data base.
Different
>> users will have different ability to access data in the
DB.
>>
>> We were thinking about using Active Directory for the
user
>> database. WEB apps would require access to information
in
>> AD to control access.
>>
>> I can provide more information if needed.
>>
>>
>> Does anyone know of some app notes that might help?
>
>Since the users will never be connecting directly to the
data (your ASP or
>ASP.NET code on the IIS server will) there's no need to
define per user
>security on the DB. Just control access to the web pages
with IIS
>authentication and create one "service" type account for
use in code for the
>data connections. You'll also get maximum benefit in
connection pooling
>that way.
>
>http://www.microsoft.com/windows2000/en/server/iis/
>
>Microsoft Internet Information Server
> Administration
> Server Administration
> Security
> Authentication
> Access Control
>
>http://www.microsoft.com/technet/prodtechnol/windowsserver
2003/proddocs/standard/gs_authentication.asp
>
>
>HOW TO: Configure IIS 5.0 Web Site Authentication in
Windows 2000
>http://support.microsoft.com/?id=310344
>HOW TO: Configure User and Group Access on an Intranet in
Windows 2000 or
>Windows NT 4.0
>http://support.microsoft.com/?id=325358
>HOW TO: Configure IIS Web Site Authentication in Windows
Server 2003
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;324274
>
>--
>Tom Kaminski IIS MVP
>http://www.iistoolshed.com/ - tools, scripts, and
utilities for running IIS
>http://mvp.support.microsoft.com/
>http://www.microsoft.com/windowsserver2003/community/cente
rs/iis/
>
Access control to the WEB pages willl take care of the
first level of security.
What I'd like see if we could use AD from within SQL/WEB
aps to control users access to data within SQL by the use
of groups or extending the schema. That way we have
control at one point. This may not be the best way but we
are looking at options. It may be better to write access
control at the SQL or ASP/.NET level.
- Next message: Gene: "Audit Logs"
- Previous message: Tom Moreau: "Re: sp_delete_backuphistory script"
- In reply to: Tom Kaminski [MVP]: "Re: Active directory control of SQL/WEB users security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
