473,799 Members | 2,940 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

SQL integrated authentication when using forms authentication

I currently I am using integrated windows authentication, (anonymous access
disabled), with impersonation on my asp.net app. I would like to implement
forms authentication against AD, but I have not found a way to then have the
proper AD user authenticated on the SQL server. If I enable anonymous
access and then specify a user that had rights to the SQL server I can make
the calls but I loose any audit trail or SQL server level rights (everyone
appears to be the same user to SQL). If I use SQL authentication on the SQL
server I can send the proper credentials to the server using the information
from the logon form, but I would like to stick with integrated
authentication on the SQL server if I could.
Nov 18 '05 #1
2 1640
There's no easy solution to the problem -- you might want to take a
look at the ASP.NET security best practices whitepaper, which explores
the options:
http://www.microsoft.com/downloads/r...eleaseID=44047

--Mary

On Tue, 19 Oct 2004 13:00:33 -0400, "Brett Smith" <bsmith at comppro
dot com> wrote:
I currently I am using integrated windows authentication, (anonymous access
disabled), with impersonation on my asp.net app. I would like to implement
forms authentication against AD, but I have not found a way to then have the
proper AD user authenticated on the SQL server. If I enable anonymous
access and then specify a user that had rights to the SQL server I can make
the calls but I loose any audit trail or SQL server level rights (everyone
appears to be the same user to SQL). If I use SQL authentication on the SQL
server I can send the proper credentials to the server using the information
from the logon form, but I would like to stick with integrated
authenticati on on the SQL server if I could.


Nov 18 '05 #2
Thank you for your response.

"Mary Chipman" <mc***@online.m icrosoft.com> wrote in message
news:do******** *************** *********@4ax.c om...
There's no easy solution to the problem -- you might want to take a
look at the ASP.NET security best practices whitepaper, which explores
the options:
http://www.microsoft.com/downloads/r...eleaseID=44047

--Mary

On Tue, 19 Oct 2004 13:00:33 -0400, "Brett Smith" <bsmith at comppro
dot com> wrote:
I currently I am using integrated windows authentication, (anonymous
access
disabled), with impersonation on my asp.net app. I would like to implement
forms authentication against AD, but I have not found a way to then have
the
proper AD user authenticated on the SQL server. If I enable anonymous
access and then specify a user that had rights to the SQL server I can
make
the calls but I loose any audit trail or SQL server level rights (everyone
appears to be the same user to SQL). If I use SQL authentication on the
SQL
server I can send the proper credentials to the server using the
information
from the logon form, but I would like to stick with integrated
authenticatio n on the SQL server if I could.

Nov 18 '05 #3

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

0
1084
by: RTJudson | last post by:
Hi All! Forgive a newbie. I am new to C#, mostly worked with perl (please, no gasps of horror or derision!). I have to applications that I need to integrate. One is a IIS6 based WebServices app, the other, well, not. I was going to build an interface between the two. I have the, call it App A -> App B part working fine. App B being the non-webservices app.
4
8544
by: Ravikanth[MVP] | last post by:
Hi It is possible that IIS and SQL Server can reside on Seperate Machines and you can use Integrated Windows Authentication to connect. Ravikanth >-----Original Message-----
9
2512
by: Tom B | last post by:
In my web.config file I've specified Windows for the authentication, in IIS I've set it to Integrated Authentication. But my SQL connection is still showing Anonymous. Is there somewhere else I need to check? Thanks Win 2003, SQL Server 2000
4
6809
by: Andrew | last post by:
Hey all, I would like to preface my question by stating I am still learning ASP.net and while I am confident in the basics and foundation, the more advanced stuff is still a challenge. Ok. :)
1
1081
by: Paul Aspinall | last post by:
Hi I have an application which will be used on a company Intranet, but will also be used by some external users (via Extranet). I want to implement Integrated authentication for the company employees, but any 'non-authenticated' users (ie. externals), must logon via Forms authentication. Whats the best way of doing this with ASP/.NET 2.0?? I want to make use of the security and page permissions for both integrated and forms...
3
13807
by: =?Utf-8?B?RGFuZGFuIFpoYW5n?= | last post by:
Now I have a web application, a web service and a SQL Server database. The Web application will invoke the web service, the web service invokes the SQL Server stored procedure. I let the web service run in an application pool which runs under a domain user, this domain user has permissions of accessing database and the connection to database is trusted connection. All these work well. The web application will be used in internet (not...
4
9540
by: R.A.M. | last post by:
Hello, I am writing my first ASP.NET application (I use .NET 2.0, Visual Web Developer 2005 Express Edition and SQL Server 2005 Express Edition). The application builds successfully but when I try to start debugging from Visual Web Developer I receive message box: Unable to start debugging on the web server. Debugging failed because integrated Windows authentication in not enabled. But I want to use forms authentication! Here is my...
2
1823
by: zanzibar | last post by:
I need to develop an intranet app that uses Windows Authentication with IIS set up for Windows Integrated Authentication. The problem is that I want to force a challenge (i.e., force the user to enter username and password) when they access the app. I know that basic and digest authentication will do this, but I cannot use these, nor can I use forms authentication. With windows integrated authentication there is no challenge. I tried...
11
5396
by: benoitc | last post by:
I've been having a problem debugging an ASP.NET 1.1 application on an existing Windows XP/Visual Studio 2003 workstation that I've inherited from somebody else. The application builds fine, but when I try to debug, it gives me the message: Error When Trying to Run Project: Unable to Start Debugging on the Web Server. Debugging failed because integrated Windows authentication is not enabled. Now, the obvious solution for this of course...
0
9687
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
10251
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
0
9072
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
7564
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
6805
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5585
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
4139
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
3759
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
3
2938
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.