By default, other IIS security modes used in conjunction with the identity configuration element settings will not result in a token that can authenticate to a remote SQL Server. The anonymous user account can be used to authenticate against a remote SQL Server.
However, the default anonymous user account is a local machine account and thus will not exist as an account on the remote SQL Server. You can change the IIS anonymous account to use a domain account, or you can mirror the local machine account on the remote SQL Server by creating a local account on the remote SQL Server with the same user name and password.
Additionally the LogonMethod metabase property for IIS6 must be set to an option that allows credentials to flow across the network. If you are unsure of the Windows identity for your application and whether that identity is logged on with a token that can flow across the network, you can run the following ASP.
NET page as part of your application to display the name of the Windows identity and a value indicating whether the identity can flow across the network. All Files. Submit Search. The additional authority would be added directly in SQL Server. Then, when any of these administrative users creates a new user account via the ReliaSoft application, the required SQL Server login can be created and the application database roles can be assigned automatically at the same time.
Option 2: Using a Group Login If the user belongs to an Active Directory group that has a SQL Server login shared by all members of the group and that group has access to the application database, you can clear the Create SQL Server login check box that is displayed when you are adding or importing a user account.
Option 3: Using Windows Impersonation for the Connection File If you choose to have some or all users connect to the SQL Server database with a connection file that impersonates a shared Windows user account that has a SQL Server login, you must do the following: A Windows network administrator must establish the shared user account on Windows. Create a free Team What is Teams? Collectives on Stack Overflow. Learn more. Asked 12 years, 8 months ago.
Active 11 years, 11 months ago. Viewed 5k times. I'd like to develop a similar solution with java, the question s is are the following: is it possible? I'd like the solution to be as simple and straight forward as possible I'm trying to avoid things like glassfish or jboss well, thanks a lot Improve this question. Add a comment. Active Oldest Votes. Improve this answer. Furthermore, if you obtained the Microsoft Windows identity instance, by default you cannot propagate that instance to another computer; Windows security infrastructure restricts that by default.
There is, however, a mechanism called "delegation" that enables propagation of Windows identities across multiple trusted computers. SqlContext Object. Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode.
0コメント