Re: How Does SQL Server Verify Domain Security

From: Will (DELETE_westes_at_earthbroadcast.com)
Date: 04/25/05


Date: Mon, 25 Apr 2005 08:11:37 -0700

What is the nature of the protocol that would need to take place
between the SQL Server / domain controller on the external side
of the proxy and the domain controller on the internal side of
the proxy?

I read one example of a Kerberos exchange last night where it
looked like the two domain controllers never talked directly to
each other, but instead negotiated authentication through a
common parent domain controller.

-- 
Will
Internet: westes at earthbroadcast.com
"Mike Epprecht (SQL MVP)" <mike@epprecht.net> wrote in message
news:DAD2F235-D8E5-44DF-9B65-094731655201@microsoft.com...
> The only way would be to setup a one-way trust, with only the
external
> Domain trusting the internal one. Proxy server ports would need
to be opened.
>
> Regards
> Mike


Relevant Pages

  • IE Unable resolve DNS
    ... Machine name: Authsrv (Domain Controller) ... Multisrv (Member Server running IIS) ... When I remove Proxy Server address from LAN Setting in IE, ...
    (microsoft.public.win2000.dns)
  • Unable to resovle DNS
    ... Machine name: Authsrv (Domain Controller) ... Multisrv (Member Server running IIS) ... When I remove Proxy Server address from LAN Setting in IE, ...
    (microsoft.public.inetserver.iis)
  • Re: Unable to resovle DNS
    ... >Machine name: Authsrv (Domain Controller) ... Multisrv (Member Server running IIS) ... >When I remove Proxy Server address from LAN Setting in IE, ...
    (microsoft.public.inetserver.iis)
  • Re: IE Unable resolve DNS
    ... > Machine name: Authsrv (Domain Controller) ... Multisrv (Member Server running IIS) ... > When I remove Proxy Server address from LAN Setting in IE, ... > I want to use DNS entry in IE with use of Proxy. ...
    (microsoft.public.win2000.dns)
  • Re: dns best security practices
    ... Normally a domain controller would never be in a DMZ unless it is a special ... you only need internal dns servers. ... your website available for internet users. ... > What if that server is the external DNS server? ...
    (microsoft.public.win2000.security)