Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 Development Tools
 ASP.NET
 use IIS to authenticate against local machine acc?

Author  Topic 

00kevin
Yak Posting Veteran

78 Posts

Posted - 2008-12-09 : 15:10:10
Is it possible to make IIS authenticate the user against local machine accounts located on a SQL Server machine?

The reason I'm asking is that where I am working they have a SQL Server 2000 database server that contains local Groups and user accounts.

The asp.net applications here impersonate the current user in order to connect to the database.

The problem with this is that it does not secure the website. It only secures the database.

I suggested that they convert all the local groups stored on the SQL server machine to Global Groups, but they don't want to. they also don't want a copy of the groups placed on the IIS box.




tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2008-12-09 : 16:47:57
I don't think that is possible. Why don't you just use SQL authentication?

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

00kevin
Yak Posting Veteran

78 Posts

Posted - 2008-12-09 : 16:49:56
is there a way to use SQL authentication with IIS?
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2008-12-09 : 16:58:05
Yes, we use SQL authentication for all of our web apps. I don't have the details though as I'm not an application developer.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

00kevin
Yak Posting Veteran

78 Posts

Posted - 2008-12-09 : 17:02:14
ok thanks.

so far it looks like all I have to do is setup the web.config file with a trusted connection and
use the following tag
<identity impersonate="true" />
Go to Top of Page
   

- Advertisement -