Security Delegation between IIS and SQL Server

From: Hannes Mayer (hmayer@mis.at)
Date: 02/24/03 

From: "Hannes Mayer" <hmayer@mis.at>
Date: Mon, 24 Feb 2003 08:08:39 +0100

Hi,

following Problem

2 Domain Controller
-DC1 is IIS with an ASP Web Application
-DC2 is SQL Server with the Database for the ASP Application

Now i need Windows NT Authentication for the WebPage and for the Database,
but the ADO Connection doesn´t work for a simple domain user.

So what i have done:
- SQL Server uses only TCPIP:1433
- SQL Server run under Domainuser XY
- With SetSPN registered a Service Principal Name for the SQL Server on Port
1433
- Domain Controllers are Default "Trusted for Delegation"
- Testuser - only member of Domain users - "Trusted for Delegation"
activated
- IIS Web App - only NT Auth.
- Testuser is a user in the SQL DB and hast correct Rights
- ADO Connection String is:
>WITH objADOConn
> .PROVIDER = "SQLOLEDB"
> .COMMANDTIMEOUT = 30
> .CONNECTIONTIMEOUT = 30
> .CURSORLOCATION = ADODB.adUseServer
> .PROPERTIES("INTEGRATED SECURITY") = "SSPI"
> .PROPERTIES("DATA SOURCE") = "DC2"
> .PROPERTIES("INITIAL CATALOG") = "MISAT"
> .PROPERTIES("PROMPT") = ADODB.adPromptNever
> .Properties("Application Name") = "MISAT_WEB"
>End With

Why does this not work - where else could be the problem - any suggestions?

TANKs for help
Hannes

Relevant Pages