Re: Hlep with Simple questions about Authentication

From: zhaounknown (zhaounknown_at_discussions.microsoft.com)
Date: 10/09/05

  • Next message: Rob R. Ainscough: "Is there any way to prevent hacker trying to guess sa password?" 
    Date: Sun, 9 Oct 2005 10:49:02 -0700

    I read though the article at the link.
    It stated that:
    Mixed mode: Valid SQL Server login accounts and passwords are not related to
    your Microsoft Windows NT/2000 accounts. With this authentication mode, you
    must supply the SQL Server login and password when you connect to SQL Server.

    I did have sql server user name and password set in the SQL Server and
    supply the username and password for connection. But the connection is
    refused because "SQL Server doesn't exists or access denied."

    "Uri Dimant" wrote:

    > Start with this
    > http://vyaskn.tripod.com/sql_server_security_best_practices.htm --------security
    > best practices
    >
    >
    >
    >
    >
    >
    >
    >
    >
    >
    >
    > "zhaounknown" <zhaounknown@discussions.microsoft.com> wrote in message
    > news:D272700C-B174-4853-83C3-E0CC8B53830D@microsoft.com...
    > > The following question may be trivial, however, I just can't make it clear
    > > to
    > > myself, even after reading through the Books Online.
    > >
    > > I have two machines in the same network.
    > > A hosts Sql Server (named AS), B access the database ASD in Sql Server AS.
    > > A has windows logon info as UserA and PasswordA, (administrator account).
    > > B has windows logon info as UserB and PasswordB. Application is running
    > > under this account.
    > >
    > > The Sql Server is set to Windows and Sql Serevr Mixed Authentication Mode,
    > > The database ASD has a UserAS and PasswordAS as the db owner.
    > >
    > > My question is:To successfully access AS from B, does the connection first
    > > pass A's window authentication, then pass the AS's SQL Server
    > > authentication
    > > (if set to Mixed Mode)?
    > >
    > > If this is true,
    > > What connection string (in ADO.Net) should I have to connect to the
    > > Database?
    > > Or, what authentication settings I should have(set) to make a successful
    > > connection in the case describled above (B access AS on A)?
    > >
    > > I observered, with the following string to work: "user
    > > id=UserAS;password=PasswordASD; data source=AS;initial catalog=ASD;
    > > persist
    > > security info=True;" , I should first set the A's login credential in B by
    > > visiting B's network place.
    > >
    > > Additional Question:
    > > When I use Windows NT Integrated Security from B, which username and
    > > password is used to acess AS on A?
    > >
    > > When I use specific user name and password, how to create a pair of
    > > username
    > > and password in AS so that the username and password can be authenticated
    > > by
    > > the windows A and sql server AS.
    > >
    > > Thanks.
    >
    >
    >

  • Next message: Rob R. Ainscough: "Is there any way to prevent hacker trying to guess sa password?"

    Relevant Pages

    • Re: Windows Authentication in asp.net 2005 to SQL Server?
      ... If the domains do not trust each other, Windows authentication is not going ... Basic authentication sometimes makes the need for Kerberos delegation go ... generic account to do the backend data stuff on our SQL Server. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Slow booting xp home.
      ... Changing the boot order to boot first from your hard disk might save you a half second, but you won't be able to boot from a CD until you change it back - and the time spent to do that will erase any previous time saved. ... 2- Consider what software you really want to start with Windows and also how you've configured your applications at startup ... Installing and Registering Visual Studio Express Editions Smart Device ...
      (microsoft.public.windowsxp.perform_maintain)
    • Re: Changing passwords / Blocking SA login attempts
      ... I went into the Server Config properties and changed to Windows ... My login for Start and Run SQL server was in this format. ... I am supposing this was an SQL authentication, ...
      (microsoft.public.sqlserver.security)
    • Windows Authentication with IIS on separate machines
      ... Yes, setting Basic Authentication in IIS works, but the ... >in SQL server but doesn't work if user account was ... >imported from a Windows account. ...
      (microsoft.public.sqlserver.security)
    • Re: Login failed for ServerGuest
      ... I think it is not a limitation in Windows 2000. ... access SQL server on Win2000 server by using Windows authenctication if I ... | I have noticed that when I try to log in using Windows Authentication ...
      (microsoft.public.sqlserver.connect)