User credentials delegation from IIS on WinXP to SQL Server on Win2003SRV fails

[kkos]

I noticed the following issue posted as a double-hop issue in many discussion
boards but found no answers that explain how to pass the second hop
with windows auth from IIS ASPX page to remote SQL Server.

Problem:
--------------
I am trying to create an asp.net website with integrated windows authentication
to access SQL databases. IIS resides on WinXP and SQL Server
on Win2000 SRV. Both are in the same NT Domain. IIS and SQL Server cannot reside on the same machine and a stand alone web server is
ideal as the website needs to access multiple SQL Servers. IIS is set to
Integrated Windows Authentication. The anonymous access in IIS settings is unchecked. The web.config file has Identity element
set for impersonation <identity impersonation=" true">
The machine running IIS & the SQL Server
are set to be "trusted for delegation" in active directory. The domain user
accounts that will be accessing the databases are not marked as "Account
is sensitive and cannot be delegated".
The connection string that the web app uses to connect to SQL database is:
"Data Source=PWSSQLT; Integrated Security=SSPI;I nitial Catalog=Pace_Ma ster;Persist Security Info=true"
with which the user credentials should be flown to the SQL database.
But instead the delegation fails and results in the following ANONYMOUS authentication failure error. All this works if I use http:\\localhos t to access website (but fails when IPAddress is used) or pass user credentials of an nt domain account (this is the same account that fails to login to SQL SRV
by setting only the impersonation attribute of the identity element to true & no user credentials) in the identity tag of the web.config file. So I am confused as to what might be causing the login failure. Is this NT configuration issue related to Kerberos authentication or the account access under which
SQL Server is running or IIS settings related issue. So far I haven't found info to help resolve the issue. Any help would greatly be appreciated.


Authentication Failure Error:
-----------------------------
Login failed for user 'NT AUTHORITY\ANONY MOUS LOGON'.

Description: An unhandled exception occurred during the execution of the current web request.
Please review the stack trace for more information about the error and where it originated in the code.

--------------------------------------------------------------------------------------------------------------------

Exception Details: System.Data.Sql Client.SqlExcep tion: Login failed for user 'NT AUTHORITY\ANONY MOUS LOGON'.

Source Error:

// Open the connection, and return it

oConn.Open();
return oConn;


Source File: e:\ING eIMS\App_Code\D ataAccess\Conne ctionManager.cs

Stack Trace:
[SqlException (0x80131904): Login failed for user 'NT AUTHORITY\ANONY MOUS LOGON'.]

System.Data.Sql Client.SqlInter nalConnection.O nError(SqlExcep tion exception, Boolean breakConnection )

System.Data.Sql Client.TdsParse r.ThrowExceptio nAndWarning(Tds ParserStateObje ct stateObj)
System.Data.Sql Client.TdsParse r.Run(RunBehavi or runBehavior, SqlCommand cmdHandler, SqlDataReader
dataStream, BulkCopySimpleR esultSet bulkCopyHandler , TdsParserStateO bject stateObj)

System.Data.Sql Client.SqlInter nalConnectionTd s.CompleteLogin (Boolean enlistOK)
System.Data.Sql Client.SqlInter nalConnectionTd s.OpenLoginEnli st(SqlConnectio n owningObject,
SqlConnectionSt ring connectionOptio ns, String newPassword, Boolean redirectedUserI nstance)
System.Data.Sql Client.SqlInter nalConnectionTd s..ctor(DbConne ctionPoolIdenti ty identity,
SqlConnectionSt ring connectionOptio ns, Object providerInfo, String newPassword,
SqlConnection owningObject, Boolean redirectedUserI nstance)
System.Data.Sql Client.SqlConne ctionFactory.Cr eateConnection( DbConnectionOpt ions options,
Object poolGroupProvid erInfo, DbConnectionPoo l pool, DbConnection owningConnectio n)
System.Data.Pro viderBase.DbCon nectionFactory. CreatePooledCon nection(DbConne ction
owningConnectio n, DbConnectionPoo l pool, DbConnectionOpt ions options)
System.Data.Pro viderBase.DbCon nectionPool.Cre ateObject(DbCon nection owningObject)
System.Data.Pro viderBase.DbCon nectionPool.Use rCreateRequest( DbConnection owningObject)
System.Data.Pro viderBase.DbCon nectionPool.Get Connection(DbCo nnection owningObject)

System.Data.Pro viderBase.DbCon nectionFactory. GetConnection(D bConnection owningConnectio n)
System.Data.Pro viderBase.DbCon nectionClosed.O penConnection(D bConnection outerConnection ,
DbConnectionFac tory connectionFacto ry) +105
System.Data.Sql Client.SqlConne ction.Open()

INGRS.DataAcces s.ConnectionMan ager.GetConnect ion() in e:\ING eIMS\App_Code\D ataAccess\Conne ctionManager.cs :
DAActivity.Page _Load(Object sender, EventArgs e) in e:\ING eIMS\DA\DAStatu s\DAActivity.as px.cs
System.Web.Util .CalliHelper.Ev entArgFunctionC aller(IntPtr fp, Object o, Object t, EventArgs e)

System.Web.Util .CalliEventHand lerDelegateProx y.Callback(Obje ct sender, EventArgs e)
System.Web.UI.C ontrol.OnLoad(E ventArgs e)
System.Web.UI.C ontrol.LoadRecu rsive()

System.Web.UI.P age.ProcessRequ estMain(Boolean includeStagesBe foreAsyncPoint, Boolean includeStagesAf terAsyncPoint)
_______________
Version Information: Microsoft .NET Framework Version:2.0.507 27.42; ASP.NET Version:2.0.507 27.210
---------------------