Trusted connections - SQL Server Forums

Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

All Forums

SQL Server 2000 Forums

SQL Server Administration (2000)

Trusted connections

Author

Topic

HCLollo
Starting Member

49 Posts

Posted - 2005-08-25 : 05:07:54

*Bow to all the gurus out there*

How it's possible to associate a trusted connection to a user? I
tried setting up SQL Server users and Windows users, giving them
all possible combos of authorizations, and still when I try to
connect using one of them via Query Analizer I always end up with
something on the line:

quote:
"Server: message 18452, level 16, state 1
[Microsoft][ODBC SQL Server Driver][SQL Server]Impossible to log on
user 'mwawa'. Reason: user is not associated to a SQL Server trusted
connection"

Probably that's not what you always get, because I've translated
directly from Italian, but all the juice should be there...
I even tried the sa!

The main reason to solve this is that the server has been
reconfigured, and my ASP application that was working greatly now
goes no more, and all the problem is in the connection string. I
think the technicians changed the authentication method on the
server, enabling the Active Directory.

Thank you all in advance,
HCL

HCLollo
Starting Member

49 Posts

Posted - 2005-08-25 : 06:24:41

Kinda solved, I just set the "Anonymous Connection user" in the
Web Site IIS manager to the one I set up in SQL Server to access
the DB I'm interested into; I'm not that sure it's the right way
to go, but since it's an internal server for an internal app, at
the moment it's fine...

HCL

yoja
Starting Member

1 Post

Posted - 2005-09-01 : 01:50:55

hi HCL
Could u help me a bit further on this..

I also get similar error message but Strangely enough i am able to connect throught SQL Enterprise manager and Query Analyzer but not thru ASP code..

HCLollo
Starting Member

49 Posts

Posted - 2005-09-01 : 06:03:46

Hi yoja!
Ok, I'll try to condense the steps I followed here, though they
assume you can put your hands on the db, or at least have someone
that can on your behalf.

Bear also in mind that for now I'm using this on a dev/test box, so
I haven't yet considered any security issues (anyone?

)...

Find which user is used to connect anonimously to the web pages in IIS, usually DOMAIN\IUSR_SERVER

Add the aforementioned user Protection->Accounts, using Enterprise Manager for example

Set the proper restrictions and database accesses

Hope this is clear enough.

For me, I changed the default IIS user to a specifically created one,
since I run the dev on a dedicated web service, and added him to the
DB using the procedure descripted. Also, I gave him DB owner perms
regarding the one needed for the app to work, though I plan to check
which are really needed and stick to those.

HCL

"If it works fine, then it doesn't have enough features"

nr
SQLTeam MVY

12543 Posts

Posted - 2005-09-01 : 06:42:14

To use integrated security from the client you have to configure iis to use kerberos (works under .net and 2003 anyway) otherwise it will run your server based code under the iis service account.

Integrated security just delegates the security checking to the caller (not the originater). Unfortunately this gets broken by iis under it's default install.

==========================================
Cursors are useful if you don't know sql.
DTS can be used in a similar way.
Beer is not cold and it isn't fizzy.

Subscribe to SQLTeam.com

SQLTeam.com Articles via RSS

SQLTeam.com Weblog via RSS

- Advertisement -

Resources