Re: Windows Authentication from a workgroup to a domain sql server

Hello,

I would not have expected this to work. (If it did, it would seem to me like
a great big security hole.)

The "trust" is in your domain. The workgroup login is outside the trust,
despite any naming conventions you might use, and the domain knows that.

If you search TechNet for "domain workgroup trust" you will find several
articles discussing them. One article is:
http://www.microsoft.com/technet/archive/winntas/maintain/acctgrps.mspx?mfr=true

RLF

"Sumon" <sumon.net@xxxxxxxxx> wrote in message
news:1174881992.771015.222320@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have got a user from a diff subnet and his computer is not part of
our domain, just a workgroup. But the workgroup name is the same as
our domain name.

The user has a local account, which I have also added in our AD with
the same name and password.

Example Setup:

DOMAIN NAME: abc
SQL Part of abc domain (running as a cluster)

Client Machine Workgroup Name: abc
Not part of any domain.
Local user account name: test

Domain abc also contains a user called abc with same password.


When the user tries to connect the SQL server comes back with:

System.Data.SqlClient.SqlException: Login failed for user ''. The user
is not associated with a trusted SQL Server connection.

What am i missing here.. would this work?

Thanks

Sazzad



.

Relevant Pages

  • Windows Authentication from a workgroup to a domain sql server
    ... But the workgroup name is the same as ... SQL Part of abc domain ... Local user account name: test ... When the user tries to connect the SQL server comes back with: ...
    (microsoft.public.sqlserver.security)
  • Re: Server needs password to synch
    ... Even if you could create a "two way realm trust" that would ... Can't the SQL Server be given an account in your domain and authenticate ... Gigabyte RAM in a workgroup called: ...
    (microsoft.public.win2000.dns)
  • Re: I still killfile no-one ; ¬ )
    ... I don't actually think I've anything further to say to him - nor to the other kooks. ... Most religions are tolerant - but most pseudo-religious kooks aren't. ... ABC is not religious by most standards, ... I don't trust that which cannot be proven. ...
    (misc.health.diabetes)
  • I still killfile no-one ; ¬ )
    ... Most religions are tolerant - but most pseudo-religious kooks aren't. ... ABC is not religious by most standards, ... I believe primarily in asking questions. ... I don't trust that which cannot be proven. ...
    (misc.health.diabetes)
  • Re: Take Me To The World - Evening Primrose!
    ... and even more of a shame the estate of the ... Think of the money it could raise for any cause the trust ... I don't see why you're calling ABC pig-headed. ... The Collier trust, one assumes, exists to ensure John Collier ...
    (rec.arts.theatre.musicals)