NT Authority/ANONYMOUS LOGIN problem, only wierder

[Mike Hutton]

Hi,

I have tried to keep things simple. Not simple enough, obviously.

I have a set of intranet ASP.NET pages which access a SQL back-end
through the normal SQLConnection stuff. I want to use peoples' NT
logons to user-stamp data changes made through the web-pages. So it
seemed obvious to use Windows authentication to access SQL
connections.

On my development box (running ASP.NET 1.1, with Anonymous Login
disabled and Windows authentication) , my pages work fine.

I have copied all the files over to a development web server (did I
need to compile them on the web server? - I guessed not). This web
server has the same web site setup, with Anonymous Login disabled, and
Windows authentication.

On both boxes I have set impersonate="tr ue" in the web.config.

The whole lot is using Windows 2000 (server on the test server), with
sp3. The SQL box is also W2k with sp3, and all are on the same
network.
If I start up the web pages from my development box, and access the
pages on the test server, I get access problems when opening SQL
connections:

Login failed for user 'NT AUTHORITY\ANONY MOUS LOGON'

Stack trace (for those who want to see it):
*************** *************** *************** *************** ******
[SqlException: Login failed for user 'NT AUTHORITY\ANONY MOUS LOGON'.]
System.Data.Sql Client.Connecti onPool.GetConne ction(Boolean&
isInTransaction ) +474
System.Data.Sql Client.SqlConne ctionPoolManage r.GetPooledConn ection(SqlConne ctionString
options, Boolean& isInTransaction ) +372
System.Data.Sql Client.SqlConne ction.Open() +384
BusinessPlans.R eference.GetSel ectSQL(String p_ConnStr, String
p_SPName, String p_TableName, String p_ResultParamNa me) +66
BusinessPlans.R eference.Popula teDataGrids(Boo lean p_ApplyMask,
Boolean p_AddNewItem) +521
BusinessPlans.R eference.ShowTa ble(Object sender, CommandEventArg s e)
+74
System.Web.UI.W ebControls.Link Button.OnComman d(CommandEventA rgs e)
+110
System.Web.UI.W ebControls.Link Button.System.W eb.UI.IPostBack EventHandler.Ra isePostBackEven t(String
eventArgument) +115
System.Web.UI.P age.RaisePostBa ckEvent(IPostBa ckEventHandler
sourceControl, String eventArgument) +18
System.Web.UI.P age.RaisePostBa ckEvent(NameVal ueCollection postData)
+138
System.Web.UI.P age.ProcessRequ estMain() +1277
*************** *************** *************** *************** ******

BUT...

in the same session I have the following set up as well:

Authentication name=MyDomain\M yLogin,
Authentication type=NTLM
Authentication passed=True

I don't see what I'm doing wrong here.

BUT...

things get even wierder when I access the pages from the test server
itself. They all work OK, and if I immediately go back and try to
access them from my development box again, they work fine!

!!!!

What is going on? The errors return if I leave the connections for a
number of minutes (presumably because the connections/sessions
time-out), the errors return. Is it failing to set up a pooled
connection on the remote server (and if so, why?) or is it something
even more obscure?

Help!

Any help would be most gratefully received.

Mike.

[bruce barker]

this scenario will not work, as any search of this newsgroup will tell you.
you can not forward nt creditals. you have three choices

1) switch to a credital format that will forward, by using basic or digest
authentication.
2) put the sql server on the same box as the web server (no forwarding
required)
3) fill in the username and password in the web config, and pass in the user
credials though another method to the sqlserver.

for more details, google this newsgroup.

-- bruce (sqlwork.com)

"Mike Hutton" <hu************ @hotmail.com> wrote in message
news:70******** *************** ***@posting.goo gle.com...

Hi,

I have tried to keep things simple. Not simple enough, obviously.

I have a set of intranet ASP.NET pages which access a SQL back-end
through the normal SQLConnection stuff. I want to use peoples' NT
logons to user-stamp data changes made through the web-pages. So it
seemed obvious to use Windows authentication to access SQL
connections.

On my development box (running ASP.NET 1.1, with Anonymous Login
disabled and Windows authentication) , my pages work fine.

I have copied all the files over to a development web server (did I
need to compile them on the web server? - I guessed not). This web
server has the same web site setup, with Anonymous Login disabled, and
Windows authentication.

On both boxes I have set impersonate="tr ue" in the web.config.

The whole lot is using Windows 2000 (server on the test server), with
sp3. The SQL box is also W2k with sp3, and all are on the same
network.
If I start up the web pages from my development box, and access the
pages on the test server, I get access problems when opening SQL
connections:

Login failed for user 'NT AUTHORITY\ANONY MOUS LOGON'

Stack trace (for those who want to see it):
*************** *************** *************** *************** ******
[SqlException: Login failed for user 'NT AUTHORITY\ANONY MOUS LOGON'.]
System.Data.Sql Client.Connecti onPool.GetConne ction(Boolean&
isInTransaction ) +474
System.Data.Sql Client.SqlConne ctionPoolManage r.GetPooledConn ection(SqlConne c
tionString options, Boolean& isInTransaction ) +372
System.Data.Sql Client.SqlConne ction.Open() +384
BusinessPlans.R eference.GetSel ectSQL(String p_ConnStr, String
p_SPName, String p_TableName, String p_ResultParamNa me) +66
BusinessPlans.R eference.Popula teDataGrids(Boo lean p_ApplyMask,
Boolean p_AddNewItem) +521
BusinessPlans.R eference.ShowTa ble(Object sender, CommandEventArg s e)
+74
System.Web.UI.W ebControls.Link Button.OnComman d(CommandEventA rgs e)
+110
System.Web.UI.W ebControls.Link Button.System.W eb.UI.IPostBack EventHandler.Ra i
sePostBackEvent (String eventArgument) +115
System.Web.UI.P age.RaisePostBa ckEvent(IPostBa ckEventHandler
sourceControl, String eventArgument) +18
System.Web.UI.P age.RaisePostBa ckEvent(NameVal ueCollection postData)
+138
System.Web.UI.P age.ProcessRequ estMain() +1277
*************** *************** *************** *************** ******

BUT...

in the same session I have the following set up as well:

Authentication name=MyDomain\M yLogin,
Authentication type=NTLM
Authentication passed=True

I don't see what I'm doing wrong here.

BUT...

things get even wierder when I access the pages from the test server
itself. They all work OK, and if I immediately go back and try to
access them from my development box again, they work fine!

!!!!

What is going on? The errors return if I leave the connections for a
number of minutes (presumably because the connections/sessions
time-out), the errors return. Is it failing to set up a pooled
connection on the remote server (and if so, why?) or is it something
even more obscure?

Help!

Any help would be most gratefully received.

Mike.

[bruce barker]

this scenario will not work, as any search of this newsgroup will tell you.
you can not forward nt creditals. you have three choices

1) switch to a credital format that will forward, by using basic or digest
authentication.
2) put the sql server on the same box as the web server (no forwarding
required)
3) fill in the username and password in the web config, and pass in the user
credials though another method to the sqlserver.

for more details, google this newsgroup.

-- bruce (sqlwork.com)

"Mike Hutton" <hu************ @hotmail.com> wrote in message
news:70******** *************** ***@posting.goo gle.com...

Hi,

I have tried to keep things simple. Not simple enough, obviously.

I have a set of intranet ASP.NET pages which access a SQL back-end
through the normal SQLConnection stuff. I want to use peoples' NT
logons to user-stamp data changes made through the web-pages. So it
seemed obvious to use Windows authentication to access SQL
connections.

On my development box (running ASP.NET 1.1, with Anonymous Login
disabled and Windows authentication) , my pages work fine.

I have copied all the files over to a development web server (did I
need to compile them on the web server? - I guessed not). This web
server has the same web site setup, with Anonymous Login disabled, and
Windows authentication.

On both boxes I have set impersonate="tr ue" in the web.config.

The whole lot is using Windows 2000 (server on the test server), with
sp3. The SQL box is also W2k with sp3, and all are on the same
network.
If I start up the web pages from my development box, and access the
pages on the test server, I get access problems when opening SQL
connections:

Login failed for user 'NT AUTHORITY\ANONY MOUS LOGON'

Stack trace (for those who want to see it):
*************** *************** *************** *************** ******
[SqlException: Login failed for user 'NT AUTHORITY\ANONY MOUS LOGON'.]
System.Data.Sql Client.Connecti onPool.GetConne ction(Boolean&
isInTransaction ) +474
System.Data.Sql Client.SqlConne ctionPoolManage r.GetPooledConn ection(SqlConne c
tionString options, Boolean& isInTransaction ) +372
System.Data.Sql Client.SqlConne ction.Open() +384
BusinessPlans.R eference.GetSel ectSQL(String p_ConnStr, String
p_SPName, String p_TableName, String p_ResultParamNa me) +66
BusinessPlans.R eference.Popula teDataGrids(Boo lean p_ApplyMask,
Boolean p_AddNewItem) +521
BusinessPlans.R eference.ShowTa ble(Object sender, CommandEventArg s e)
+74
System.Web.UI.W ebControls.Link Button.OnComman d(CommandEventA rgs e)
+110
System.Web.UI.W ebControls.Link Button.System.W eb.UI.IPostBack EventHandler.Ra i
sePostBackEvent (String eventArgument) +115
System.Web.UI.P age.RaisePostBa ckEvent(IPostBa ckEventHandler
sourceControl, String eventArgument) +18
System.Web.UI.P age.RaisePostBa ckEvent(NameVal ueCollection postData)
+138
System.Web.UI.P age.ProcessRequ estMain() +1277
*************** *************** *************** *************** ******

BUT...

in the same session I have the following set up as well:

Authentication name=MyDomain\M yLogin,
Authentication type=NTLM
Authentication passed=True

I don't see what I'm doing wrong here.

BUT...

things get even wierder when I access the pages from the test server
itself. They all work OK, and if I immediately go back and try to
access them from my development box again, they work fine!

!!!!

What is going on? The errors return if I leave the connections for a
number of minutes (presumably because the connections/sessions
time-out), the errors return. Is it failing to set up a pooled
connection on the remote server (and if so, why?) or is it something
even more obscure?

Help!

Any help would be most gratefully received.

Mike.

[Ken Witmyer]

Actually, the scenario does work. I've been experiencing the exact
same problem. I spent a couple of hours last night reading through
various news group postings which all have different answers, though
none really seem to work consistently. I've gotta tell you that "any
search of this newsgroup" will not tell you that you can't forward NT
credentials. Some do, most don't. With that said, I do understand
forwarding of credentials to be impossible, but what Mike reported in
the original post is exactly what I've experienced so there's got to
be something else in play.

Mike, did you ever find a solution?

"bruce barker" <no***********@ safeco.com> wrote in message news:<Oo******* *******@TK2MSFT NGP11.phx.gbl>. ..

this scenario will not work, as any search of this newsgroup will tell you.
you can not forward nt creditals. you have three choices

1) switch to a credital format that will forward, by using basic or digest
authentication.
2) put the sql server on the same box as the web server (no forwarding
required)
3) fill in the username and password in the web config, and pass in the user
credials though another method to the sqlserver.

for more details, google this newsgroup.

-- bruce (sqlwork.com)

"Mike Hutton" <hu************ @hotmail.com> wrote in message
news:70******** *************** ***@posting.goo gle.com...

Hi,

I have tried to keep things simple. Not simple enough, obviously.

I have a set of intranet ASP.NET pages which access a SQL back-end
through the normal SQLConnection stuff. I want to use peoples' NT
logons to user-stamp data changes made through the web-pages. So it
seemed obvious to use Windows authentication to access SQL
connections.

On my development box (running ASP.NET 1.1, with Anonymous Login
disabled and Windows authentication) , my pages work fine.

I have copied all the files over to a development web server (did I
need to compile them on the web server? - I guessed not). This web
server has the same web site setup, with Anonymous Login disabled, and
Windows authentication.

On both boxes I have set impersonate="tr ue" in the web.config.

The whole lot is using Windows 2000 (server on the test server), with
sp3. The SQL box is also W2k with sp3, and all are on the same
network.
If I start up the web pages from my development box, and access the
pages on the test server, I get access problems when opening SQL
connections:

Login failed for user 'NT AUTHORITY\ANONY MOUS LOGON'

Stack trace (for those who want to see it):
*************** *************** *************** *************** ******
[SqlException: Login failed for user 'NT AUTHORITY\ANONY MOUS LOGON'.]
System.Data.Sql Client.Connecti onPool.GetConne ction(Boolean&
isInTransaction ) +474

System.Data.Sql Client.SqlConne ctionPoolManage r.GetPooledConn ection(SqlConne c
tionString

options, Boolean& isInTransaction ) +372
System.Data.Sql Client.SqlConne ction.Open() +384
BusinessPlans.R eference.GetSel ectSQL(String p_ConnStr, String
p_SPName, String p_TableName, String p_ResultParamNa me) +66
BusinessPlans.R eference.Popula teDataGrids(Boo lean p_ApplyMask,
Boolean p_AddNewItem) +521
BusinessPlans.R eference.ShowTa ble(Object sender, CommandEventArg s e)
+74
System.Web.UI.W ebControls.Link Button.OnComman d(CommandEventA rgs e)
+110

System.Web.UI.W ebControls.Link Button.System.W eb.UI.IPostBack EventHandler.Ra i
sePostBackEvent (String

eventArgument) +115
System.Web.UI.P age.RaisePostBa ckEvent(IPostBa ckEventHandler
sourceControl, String eventArgument) +18
System.Web.UI.P age.RaisePostBa ckEvent(NameVal ueCollection postData)
+138
System.Web.UI.P age.ProcessRequ estMain() +1277
*************** *************** *************** *************** ******

BUT...

in the same session I have the following set up as well:

Authentication name=MyDomain\M yLogin,
Authentication type=NTLM
Authentication passed=True

I don't see what I'm doing wrong here.

BUT...

things get even wierder when I access the pages from the test server
itself. They all work OK, and if I immediately go back and try to
access them from my development box again, they work fine!

!!!!

What is going on? The errors return if I leave the connections for a
number of minutes (presumably because the connections/sessions
time-out), the errors return. Is it failing to set up a pooled
connection on the remote server (and if so, why?) or is it something
even more obscure?

Help!

Any help would be most gratefully received.

Mike.