Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
lianaent
Starting Member
5 Posts |
 Posted - 2008-08-20 : 17:31:40
|
| I don't think this has been answered yet, though I've tried at least 20 different "solutions." It seems to have begun with one of the latest Microsoft "Patch Tuesdays."Here's the scenario:I have an asp.net 1.1 application on my XP box.web.config has impersonate=true<deny users="?"/> connection string: Integrated Security=SSPI;Initial Catalog=[dbname];Data Source=[sql server name];SQL Server 2005 running on a Windows Server 2003 box.Application server running on a different Windows Server 2003 box.The application runs fine from my box, but when I copy the project to the application server and run it using the DNS name, I get the anonymous logon error. I guess this has to do with the double hop.I really don't understand the depths of all the security settings and domain name changes (does anyone?). I've been creating accounts according to the literature out there, granting all kinds of privileges, but nothing has worked. Hopefully I can get everything back to what it was, except for the key thing I need.Has anyone out there "really" figured this out yet?Thanks!Larry |
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-08-20 : 23:19:39
|
| Do app server and sql server in same domain? If not, are domains are trusted? If not again, you can't connect to sql with windows authentication. |
 |
|
|
lianaent
Starting Member
5 Posts |
Posted - 2008-08-21 : 14:25:42
|
| The app server and sql server are in the same domain, but, the app server is apparently using Anonymous for some reason. Our network guy tells me our IDs are all local, so maybe the app server doesn't know any better. So, if I understand this, we have to find out why the app server is using Anonymous, and then somehow tell it to use a domain id instead, and set that domain id to have full privileges on the sql server? |
|
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-08-21 : 23:56:02
|
| Better to use domain account but not necessary to have full privileges on the sql server. |
|
|
|
|
|
|
|
|
Login failed for NT AUTHORITY/ANONYMOUS LOGON