RE: Secure Logins for SQL Server 2000 on Novell Netowrk

From: Kevin McDonnell [MSFT] (kevmc_at_online.microsoft.com)
Date: 09/13/04 

Date: Mon, 13 Sep 2004 16:39:30 GMT

- Reponses inline:

How do I go about preventing SQL server usernames and passwords flying
around a Novell network in the clear?

- If you put a server certificate on SQL, and use SQL Authentication, the
logins will be encrypted.
- If you enable Protocol encryption, all the traffic to and from the client
will be encrypted.

Is there a way I can use Windows authentication on the SQL server? All the
clients use Win XP with Netware Client for Windows (or whatever it's
called). Windows authentication would be best and easiest.

- As long as the clients login to a Windows domain, then yes you can use
Windows Authentication.
- Otherwise, you have to duplicate usernames and passwords on the machines.

If I have to use Mixed mode and send passwords from client ODBCs etc, how
can I secure the usernames and passwords? IPSEC doesn't seem to work on
Novell (locks up the connection, returns errors, etc), and even SSL won't
work right. (The SQL server 2000 has sp3a.)

- See first response. Yes. SSL will work.
276553 HOW TO: Enable SSL Encryption for SQL Server 2000 with Certificate
Server
http://support.microsoft.com/?id=276553

Thanks,

Kevin McDonnell
Microsoft Corporation

This posting is provided AS IS with no warranties, and confers no rights.

Relevant Pages

  • Re: Locking down database accounts
    ... Windows Authentication rather than SQL Server user accounts and passwords. ...
    (microsoft.public.sqlserver.security)
  • Re: Convert SQL logins to Windows authentication
    ... SQL Server doesn't store passwords for Windows authenticated accounts since ... > SQL accounts...is there a known script/utility that can transfer the SQL> login passwords to the new corresponding Windows Authentication passwords? ...
    (microsoft.public.sqlserver.security)
  • Re: Convert SQL logins to Windows authentication
    ... > SQL Server doesn't store passwords for Windows authenticated accounts ... > grant the existing Windows accounts access to SQL Server, ... >> login passwords to the new corresponding Windows Authentication ...
    (microsoft.public.sqlserver.security)
  • Cant change/add anything in Access 2000 project ?
    ... I am trying to use Access 2000 on a client with SQL Server 2000 on a server. ... For testing I created a Test database on the SQL Server and set the right ... Windows Authentication and selected the Test database. ...
    (microsoft.public.access.gettingstarted)
  • Cant change or add something to an ADP ?
    ... I am trying to use Access 2000 on a client with SQL Server 2000 on a server. ... For testing I created a Test database on the SQL Server and set the right ... Windows Authentication and selected the Test database. ...
    (microsoft.public.access.adp.sqlserver)