Re: IIS Security Question

From: TheWanderer (nobody_at_spamcop.net)
Date: 10/31/03

  • Next message: SkyWalker: "Re: SQL Server 7.0 Security Patch MS03-031"
    Date: Thu, 30 Oct 2003 23:58:10 GMT
    
    

    I just use the SA account

    "digitalfish" <digital.fish@ntlworld.com> wrote in message
    news:3fa04383$0$12708$fa0fcedb@lovejoy.zen.co.uk...
    > I have a windows 2000 server box running SQL 2000. This box is a domain
    > controller, running AD, DNS, DHCP etc. SQL is currently using mixed-mode
    > authentication, although this can be changed if necessary. My web server
    box
    > is a separate machine also running windows 2000 server, running IIS 6. I
    > have created a user role in my database with only select permissions on a
    > few tables - this role will be my 'internet user' account.
    >
    > How do I configure IIS (& ASP) on my web server to use this 'internet
    user'
    > role to connect to my database? Do I have to create a new user account in
    > SQL and then hard-code the username and password in my ASP scripts, or can
    I
    > specify that IIS runs under a certain user account and then use windows
    > authentication to communicate with SQL?
    >
    > Thanks for any help,
    > df
    >
    >


  • Next message: SkyWalker: "Re: SQL Server 7.0 Security Patch MS03-031"

    Relevant Pages

    • Re: Distributed Query - Linked Servers?
      ... In the case of SQL style accounts, it doesn't seem very secure to me, because the password will be transmitted over the network. ... it should also be able to work by setting up a credential and proxy account on Server1. ... In this case it could work with NTLM authentication. ... we just need to verify that the 2 sql server instances are under sql server and windows authentication mode and the sql account you use has the permission on the 2 sql server instances. ...
      (microsoft.public.sqlserver.server)
    • RE: Integrated Authentication (Kerberos) Problem
      ... Verify the SPN for the SQL service account is registered such as the ... >Thread-Topic: Integrated Authentication Problem ... A Windows XP SP1 with IE6 client machine ...
      (microsoft.public.inetserver.iis.security)
    • Re: Utter madness!
      ... If it's going to be "tricky" to get a trusted connection to my SQL box ... certain authentication scenarios are harder in that set ... To do the service account approach, ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Utter madness!
      ... Lots of people run SQL on other boxes. ... certain authentication scenarios are harder in that set up. ... Another reason is that you can avoid the whole Kerberos delegation ... To do the service account approach, ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: How to setup IAS SQL Logging with Windows Authentication ?
      ... Windows authentication will not work with SQL logging like this. ... is because IAS will use the local system account to connect to the remote ...
      (microsoft.public.internet.radius)