impersonate with SQL Server on the same domain

[Mark]

We are attempting to use impersonation to connect from our ASP.NET website
to a SQL Server on the same domain. The code below works just fine in our
web.config file:

<identity impersonate="tr ue" userName="mydom ain\mylogin"
password="whate ver">

However, if we attempt to impersonate the user that currently is logged in
to the client computer using ...

<identity impersonate="tr ue">

we get the error message:

Login failed for user '(null)'. Reason: Not associated with a trusted SQL
Server connection.

I'm an SA on the SQL Server box ... something else isn't quite clicking.
Any recommendations ? In IIS we have Integrated Windows Authentication
checked, and nothing else.

Thanks in advance.

Mark
fi******@umn.ed u

[Curt_C [MVP]]

just as a test, try Basic instead of Integrated auth once....

--
Curt Christianson
Owner/Lead Developer, DF-Software
www.Darkfalz.com
"Mark" <mf****@idonotl ikespam.cce.umn .edu> wrote in message
news:%2******** ********@TK2MSF TNGP12.phx.gbl. ..

We are attempting to use impersonation to connect from our ASP.NET website
to a SQL Server on the same domain. The code below works just fine in our
web.config file:

<identity impersonate="tr ue" userName="mydom ain\mylogin"
password="whate ver">

However, if we attempt to impersonate the user that currently is logged in
to the client computer using ...

<identity impersonate="tr ue">

we get the error message:

Login failed for user '(null)'. Reason: Not associated with a trusted SQL
Server connection.

I'm an SA on the SQL Server box ... something else isn't quite clicking.
Any recommendations ? In IIS we have Integrated Windows Authentication
checked, and nothing else.

Thanks in advance.

Mark
fi******@umn.ed u

[bruce barker]

to pass the users credentials to the sqlserver (on a different box),
delegation is required. ntlm does support delegation. only basic (which
gives iis a primary token which is allowed 1 hop) and digest (if delegation
is enabled) support passing user creditals from the iis box to a different
box.

-- bruce (sqlwork.com)
"Mark" <mf****@idonotl ikespam.cce.umn .edu> wrote in message
news:#V******** ******@TK2MSFTN GP12.phx.gbl...

We are attempting to use impersonation to connect from our ASP.NET website
to a SQL Server on the same domain. The code below works just fine in our
web.config file:

<identity impersonate="tr ue" userName="mydom ain\mylogin"
password="whate ver">

However, if we attempt to impersonate the user that currently is logged in
to the client computer using ...

<identity impersonate="tr ue">

we get the error message:

Login failed for user '(null)'. Reason: Not associated with a trusted SQL
Server connection.

I'm an SA on the SQL Server box ... something else isn't quite clicking.
Any recommendations ? In IIS we have Integrated Windows Authentication
checked, and nothing else.

Thanks in advance.

Mark
fi******@umn.ed u

[Mark]

Bruce,

I executed the following code:

System.Security .Principal.IIde ntity ii = User.Identity;
System.Security .Principal.Wind owsIdentity wi = WindowsIdentity .GetCurrent();

Response.Write( "<br>IIdentity. AuthenticationT ype: " +
ii.Authenticati onType);
// Displays: IIdentity.Authe nticationType: Negotiate

Response.Write( "<br>WindowsIde ntity.Authentic ationType: " +
wi.Authenticati onType);
// Displays: WindowsIdentity .Authentication Type: NTLM

??? What does this say?

Also, how does one enable delegation as opposed to impersonation?

Thanks for your help. We appreciate it.

Mark
fi******@umn.ed u
"bruce barker" <no***********@ safeco.com> wrote in message
news:et******** ******@TK2MSFTN GP12.phx.gbl...

to pass the users credentials to the sqlserver (on a different box),
delegation is required. ntlm does support delegation. only basic (which
gives iis a primary token which is allowed 1 hop) and digest (if delegation is enabled) support passing user creditals from the iis box to a different
box.

-- bruce (sqlwork.com)
"Mark" <mf****@idonotl ikespam.cce.umn .edu> wrote in message
news:#V******** ******@TK2MSFTN GP12.phx.gbl...

We are attempting to use impersonation to connect from our ASP.NET website to a SQL Server on the same domain. The code below works just fine in our web.config file:

<identity impersonate="tr ue" userName="mydom ain\mylogin"
password="whate ver">

However, if we attempt to impersonate the user that currently is logged in to the client computer using ...

<identity impersonate="tr ue">

we get the error message:

Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection.

I'm an SA on the SQL Server box ... something else isn't quite clicking.
Any recommendations ? In IIS we have Integrated Windows Authentication
checked, and nothing else.

Thanks in advance.

Mark
fi******@umn.ed u

[Mark]

Curt,

I'm not sure if this is good news, BUT it did work when I checked Basic. In
fact, it worked when I had Basic checked both with and without integrated
checked.

What does this mean? The thought of needing basic does not sound good on
the surface, but I'm no IIS guru.

Thanks!

Mark

"Curt_C [MVP]" <software_AT_da rkfalz.com> wrote in message
news:%2******** ********@tk2msf tngp13.phx.gbl. ..

just as a test, try Basic instead of Integrated auth once....

--
Curt Christianson
Owner/Lead Developer, DF-Software
www.Darkfalz.com
"Mark" <mf****@idonotl ikespam.cce.umn .edu> wrote in message
news:%2******** ********@TK2MSF TNGP12.phx.gbl. ..

We are attempting to use impersonation to connect from our ASP.NET website to a SQL Server on the same domain. The code below works just fine in our web.config file:

<identity impersonate="tr ue" userName="mydom ain\mylogin"
password="whate ver">

However, if we attempt to impersonate the user that currently is logged in to the client computer using ...

<identity impersonate="tr ue">

we get the error message:

Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection.

I'm an SA on the SQL Server box ... something else isn't quite clicking.
Any recommendations ? In IIS we have Integrated Windows Authentication
checked, and nothing else.

Thanks in advance.

Mark
fi******@umn.ed u

[Curt_C [MVP]]

write out the user that the system thinks you are when you use Integrated.
It may be as simple as "user" vs "domain\use r"

--
Curt Christianson
Owner/Lead Developer, DF-Software
www.Darkfalz.com
"Mark" <mf****@idonotl ikespam.cce.umn .edu> wrote in message
news:%2******** ********@TK2MSF TNGP11.phx.gbl. ..

Curt,

I'm not sure if this is good news, BUT it did work when I checked Basic. In fact, it worked when I had Basic checked both with and without integrated
checked.

What does this mean? The thought of needing basic does not sound good on
the surface, but I'm no IIS guru.

Thanks!

Mark

"Curt_C [MVP]" <software_AT_da rkfalz.com> wrote in message
news:%2******** ********@tk2msf tngp13.phx.gbl. ..

just as a test, try Basic instead of Integrated auth once....

--
Curt Christianson
Owner/Lead Developer, DF-Software
www.Darkfalz.com
"Mark" <mf****@idonotl ikespam.cce.umn .edu> wrote in message
news:%2******** ********@TK2MSF TNGP12.phx.gbl. ..

We are attempting to use impersonation to connect from our ASP.NET website to a SQL Server on the same domain. The code below works just fine in our web.config file:

<identity impersonate="tr ue" userName="mydom ain\mylogin"
password="whate ver">

However, if we attempt to impersonate the user that currently is logged

in

to the client computer using ...

<identity impersonate="tr ue">

we get the error message:

Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection.

I'm an SA on the SQL Server box ... something else isn't quite

clicking. Any recommendations ? In IIS we have Integrated Windows Authentication
checked, and nothing else.

Thanks in advance.

Mark
fi******@umn.ed u

[Mark]

Curt,

I tried:
System.Security .Principal.Wind owsIdentity.Get Current().Name
which should display the impersonated user. With or without the Basic
checked, it displayed the domain/user.

What does this imply? Thanks again.

Mark
fi******@umn.ed u

"Curt_C [MVP]" <software_AT_da rkfalz.com> wrote in message
news:%2******** ********@TK2MSF TNGP10.phx.gbl. ..

write out the user that the system thinks you are when you use Integrated.
It may be as simple as "user" vs "domain\use r"

--
Curt Christianson
Owner/Lead Developer, DF-Software
www.Darkfalz.com
"Mark" <mf****@idonotl ikespam.cce.umn .edu> wrote in message
news:%2******** ********@TK2MSF TNGP11.phx.gbl. ..

Curt,

I'm not sure if this is good news, BUT it did work when I checked Basic.

In

fact, it worked when I had Basic checked both with and without integrated

checked.

What does this mean? The thought of needing basic does not sound good on the surface, but I'm no IIS guru.

Thanks!

Mark

"Curt_C [MVP]" <software_AT_da rkfalz.com> wrote in message
news:%2******** ********@tk2msf tngp13.phx.gbl. ..

just as a test, try Basic instead of Integrated auth once....

--
Curt Christianson
Owner/Lead Developer, DF-Software
www.Darkfalz.com
"Mark" <mf****@idonotl ikespam.cce.umn .edu> wrote in message
news:%2******** ********@TK2MSF TNGP12.phx.gbl. ..
> We are attempting to use impersonation to connect from our ASP.NET

website

> to a SQL Server on the same domain. The code below works just fine in

our

> web.config file:
>
> <identity impersonate="tr ue" userName="mydom ain\mylogin"
> password="whate ver">
>
> However, if we attempt to impersonate the user that currently is logged

in

> to the client computer using ...
>
> <identity impersonate="tr ue">
>
> we get the error message:
>
> Login failed for user '(null)'. Reason: Not associated with a

trusted SQL

> Server connection.
>
> I'm an SA on the SQL Server box ... something else isn't quite

clicking. > Any recommendations ? In IIS we have Integrated Windows

Authentication > checked, and nothing else.
>
> Thanks in advance.
>
> Mark
> fi******@umn.ed u
>
>
>
>
>
>