How Does SQL Server Verify Domain Security

From: Will (DELETE_westes_at_earthbroadcast.com)
Date: 04/24/05 

Date: Sat, 23 Apr 2005 21:15:35 -0700

How does SQL Server verify the credentials of a domain user who attempts to
use a database with domain security? Is some sort of Kerberos key passed
instead of the userid and password, and how does SQL Server's security
verify these tokens are correct?

We want to migrate a small application from an internal network to the other
side of a proxy server, and we want to understand what is required for the
domain authentication to continue working. 

-- 
Will

Relevant Pages

  • Re: How Does SQL Server Verify Domain Security
    ... > How does SQL Server verify the credentials of a domain user who attempts ... > use a database with domain security? ... Is some sort of Kerberos key ...
    (microsoft.public.sqlserver.security)
  • Re: Windows service
    ... if you know all of this why you recommend to Rotsey not to use Domain Security? ... It's easily cracked, doesn't have any metering on it to prevent brute force attacks, transmits the credentials to the database in plain-text, and doesn't integrate at all into the standard security infrastructure already being used by the organization. ... There's no default monitoring of the invalid password attempts, no automatic account lock-out, etc. There's a ton of documentation on this found on the web. ... It's one less set of passwords to remember, less configuration in the long run, fewer plain-text passwords floating around in email & config files. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Loss of workgroup security database
    ... You could also try creating a new database and importing all the objects ... > that is the username/password combination from the workgroup security file ... > which was assigned admin rights to the database, ... > To put it another way, do Domain, Enterprise, or other Domain security ...
    (microsoft.public.access.security)