Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2008 Forums
 SQL Server Administration (2008)
 SQLCMD with SQL Server Authentication

Author  Topic 

markjk
Starting Member

2 Posts

Posted - 2010-12-14 : 10:39:38
I would like to use sqlcmd while providing a password but I would like to know how secure it is. I am intended to use it for executing queries on a high risk server. Does this send the password over the network unecrypted or is it secure?

I am using 2008 R1 which does not provide the -N argument for encryption.

Feel free to post links to pages with more info about this, I had trouble find some. thanks

X002548
Not Just a Number

15586 Posts

Posted - 2010-12-14 : 12:29:39
Use a trusted connections and a windows login

Brett

8-)

Hint: Want your questions answered fast? Follow the direction in this link
http://weblogs.sqlteam.com/brettk/archive/2005/05/25/5276.aspx


Want to help yourself?

http://msdn.microsoft.com/en-us/library/ms130214.aspx

http://weblogs.sqlteam.com/brettk/

http://brettkaiser.blogspot.com/


Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2010-12-14 : 13:04:14
+100 to Brett's post. Do not use SQL authentication where you'd specify userid/password combo. If you use Windows authentication instead (also known as trusted connection), then it'll use the current security context of the person logged into Windows (the operating system).

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

markjk
Starting Member

2 Posts

Posted - 2010-12-14 : 14:04:46
I am aware that windows auth is more secure. For my purposes I will not always be able to use windows auth. I need to determine how secure sql server auth is.
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2010-12-14 : 14:15:42
I'm pretty sure it's not secure for sqlcmd.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page
   

- Advertisement -