Re: How Does SQL Server Verify Domain Security

From: Jens Süßmeyer (Jens_at_Remove_this_For_Contacting.sqlserver2005.de)
Date: 04/24/05

  • Next message: Jens Süßmeyer: "Re: How Does SQL Server Verify Domain Security" 
    Date: Sun, 24 Apr 2005 11:32:15 +0200

    "Will" <DELETE_westes@earthbroadcast.com> schrieb im Newsbeitrag
    news:uy%23DDRISFHA.3156@TK2MSFTNGP15.phx.gbl...
    > How does SQL Server verify the credentials of a domain user who attempts
    > to
    > use a database with domain security? Is some sort of Kerberos key
    > passed
    > instead of the userid and password, and how does SQL Server's security
    > verify these tokens are correct?
    >
    > We want to migrate a small application from an internal network to the
    > other
    > side of a proxy server, and we want to understand what is required for the
    > domain authentication to continue working.
    >
    > --
    > Will
    >
    >
    >

  • Next message: Jens Süßmeyer: "Re: How Does SQL Server Verify Domain Security"

    Relevant Pages

    • How Does SQL Server Verify Domain Security
      ... How does SQL Server verify the credentials of a domain user who attempts to ... use a database with domain security? ... Is some sort of Kerberos key passed ...
      (microsoft.public.sqlserver.security)
    • Re: Windows service
      ... if you know all of this why you recommend to Rotsey not to use Domain Security? ... It's easily cracked, doesn't have any metering on it to prevent brute force attacks, transmits the credentials to the database in plain-text, and doesn't integrate at all into the standard security infrastructure already being used by the organization. ... There's no default monitoring of the invalid password attempts, no automatic account lock-out, etc. There's a ton of documentation on this found on the web. ... It's one less set of passwords to remember, less configuration in the long run, fewer plain-text passwords floating around in email & config files. ...
      (microsoft.public.dotnet.languages.csharp)
    • Re: Loss of workgroup security database
      ... You could also try creating a new database and importing all the objects ... > that is the username/password combination from the workgroup security file ... > which was assigned admin rights to the database, ... > To put it another way, do Domain, Enterprise, or other Domain security ...
      (microsoft.public.access.security)