Using asp.net 1.1. vb.net 2003.
I am trying to connect to a remote sql server 2000 on a virtual machine
running windows 2000 server. I can connect through the server explorer in
visual studio, but cannot connect through code. I have done it before and
can not do it now; I don't know what changed. (I also cannot connect to
local Access database through code though I can from server explorer.)
The code is:
conn = New SqlConnection("data source=SERVERNAME;initial
catalog=DATABASE;user id=sa")
Code fails at "conn.open", returning the following error message: "SQL
Server does not exist or access denied."
SQL Server authentication is set to "sqlsever and windows" and, of course,
the "sa" account exists, with no password (though it doesn't work when I set
a password either).
Please help. I'm really getting desperate, here. 16 2274
I'd suspect its not that it doesnt exist, its that you are being denied. Try
looking at this http://www.darkfalz.com/1059 to create the connection
string. So this on the VPC session, that way you know you got your access
correct before you try to do it with code.
--
Curt Christianson
site: http://www.darkfalz.com
blog: http://blog.darkfalz.com
"peshekeedweller" wrote: Using asp.net 1.1. vb.net 2003.
I am trying to connect to a remote sql server 2000 on a virtual machine running windows 2000 server. I can connect through the server explorer in visual studio, but cannot connect through code. I have done it before and can not do it now; I don't know what changed. (I also cannot connect to local Access database through code though I can from server explorer.)
The code is: conn = New SqlConnection("data source=SERVERNAME;initial catalog=DATABASE;user id=sa")
Code fails at "conn.open", returning the following error message: "SQL Server does not exist or access denied."
SQL Server authentication is set to "sqlsever and windows" and, of course, the "sa" account exists, with no password (though it doesn't work when I set a password either).
Please help. I'm really getting desperate, here.
Curt, I can create a successful connection in the data link wizard; I can
create a successful connection in the Vis Studio Server Explorer; I can
create a succesful server in the Vis Studio Server Explorer. But none of the
connection strings work in code. Even trying to use a SQLDataAdapter
component with a connection string created successfully in Server Explorer
fails when compiled and run.
What the heck is going on?
"Curt_C [MVP]" <software_at_darkfalz.com> wrote in message
news:D0**********************************@microsof t.com... I'd suspect its not that it doesnt exist, its that you are being denied. Try looking at this http://www.darkfalz.com/1059 to create the connection string. So this on the VPC session, that way you know you got your access correct before you try to do it with code.
-- Curt Christianson site: http://www.darkfalz.com blog: http://blog.darkfalz.com "peshekeedweller" wrote:
Using asp.net 1.1. vb.net 2003.
I am trying to connect to a remote sql server 2000 on a virtual machine running windows 2000 server. I can connect through the server explorer in visual studio, but cannot connect through code. I have done it before and can not do it now; I don't know what changed. (I also cannot connect to local Access database through code though I can from server explorer.)
The code is: conn = New SqlConnection("data source=SERVERNAME;initial catalog=DATABASE;user id=sa")
Code fails at "conn.open", returning the following error message: "SQL Server does not exist or access denied."
SQL Server authentication is set to "sqlsever and windows" and, of course, the "sa" account exists, with no password (though it doesn't work when I set a password either).
Please help. I'm really getting desperate, here.
Try :
"Data Source=SERVERNAME;Initial Catalog=DATABASE;Persist Security Info=True;User
ID=sa;Password="
instead of
"data source=SERVERNAME;initial catalog=DATABASE;user id=sa"
Although why you would use a blank password for the sa user is beyond me.
Juan T. Llibre
ASP.NET MVP
ASP.NET FAQ : http://asp.net.do/faq/
==========================
"peshekeedweller" <so*****@somewhere.com> wrote in message
news:5n*******************@fe10.news.easynews.com. .. Curt, I can create a successful connection in the data link wizard; I can create a successful connection in the Vis Studio Server Explorer; I can create a succesful server in the Vis Studio Server Explorer. But none of the connection strings work in code. Even trying to use a SQLDataAdapter component with a connection string created successfully in Server Explorer fails when compiled and run.
What the heck is going on?
"Curt_C [MVP]" <software_at_darkfalz.com> wrote in message news:D0**********************************@microsof t.com... I'd suspect its not that it doesnt exist, its that you are being denied. Try looking at this http://www.darkfalz.com/1059 to create the connection string. So this on the VPC session, that way you know you got your access correct before you try to do it with code.
-- Curt Christianson site: http://www.darkfalz.com blog: http://blog.darkfalz.com "peshekeedweller" wrote:
Using asp.net 1.1. vb.net 2003.
I am trying to connect to a remote sql server 2000 on a virtual machine running windows 2000 server. I can connect through the server explorer in visual studio, but cannot connect through code. I have done it before and can not do it now; I don't know what changed. (I also cannot connect to local Access database through code though I can from server explorer.)
The code is: conn = New SqlConnection("data source=SERVERNAME;initial catalog=DATABASE;user id=sa")
Code fails at "conn.open", returning the following error message: "SQL Server does not exist or access denied."
SQL Server authentication is set to "sqlsever and windows" and, of course, the "sa" account exists, with no password (though it doesn't work when I set a password either).
Please help. I'm really getting desperate, here.
Sorry Juan, still didin't work. Got exactly the same result.
And it is a development sql server with only 3 users and is not exposed to
the internet. That's why I don't assign password to the sa account.
"Juan T. Llibre" <no***********@nowhere.com> wrote in message
news:%2****************@tk2msftngp13.phx.gbl... Try :
"Data Source=SERVERNAME;Initial Catalog=DATABASE;Persist Security Info=True;User ID=sa;Password="
instead of
"data source=SERVERNAME;initial catalog=DATABASE;user id=sa"
Although why you would use a blank password for the sa user is beyond me. Juan T. Llibre ASP.NET MVP ASP.NET FAQ : http://asp.net.do/faq/ ==========================
"peshekeedweller" <so*****@somewhere.com> wrote in message news:5n*******************@fe10.news.easynews.com. .. Curt, I can create a successful connection in the data link wizard; I can create a successful connection in the Vis Studio Server Explorer; I can create a succesful server in the Vis Studio Server Explorer. But none of the connection strings work in code. Even trying to use a SQLDataAdapter component with a connection string created successfully in Server Explorer fails when compiled and run.
What the heck is going on?
"Curt_C [MVP]" <software_at_darkfalz.com> wrote in message news:D0**********************************@microsof t.com... I'd suspect its not that it doesnt exist, its that you are being denied. Try looking at this http://www.darkfalz.com/1059 to create the connection string. So this on the VPC session, that way you know you got your access correct before you try to do it with code.
-- Curt Christianson site: http://www.darkfalz.com blog: http://blog.darkfalz.com "peshekeedweller" wrote:
Using asp.net 1.1. vb.net 2003.
I am trying to connect to a remote sql server 2000 on a virtual machine running windows 2000 server. I can connect through the server explorer in visual studio, but cannot connect through code. I have done it before and can not do it now; I don't know what changed. (I also cannot connect to local Access database through code though I can from server explorer.)
The code is: conn = New SqlConnection("data source=SERVERNAME;initial catalog=DATABASE;user id=sa")
Code fails at "conn.open", returning the following error message: "SQL Server does not exist or access denied."
SQL Server authentication is set to "sqlsever and windows" and, of course, the "sa" account exists, with no password (though it doesn't work when I set a password either).
Please help. I'm really getting desperate, here.
All of these tests worked from WITHIN the VPC session just fine but the
connection string isnt working right? I cant think of a single instance that
would cause this. There must be a piece of info we aren't getting... a
security setting on the SQL, something...
--
Curt Christianson
site: http://www.darkfalz.com
blog: http://blog.darkfalz.com
"peshekeedweller" wrote: Curt, I can create a successful connection in the data link wizard; I can create a successful connection in the Vis Studio Server Explorer; I can create a succesful server in the Vis Studio Server Explorer. But none of the connection strings work in code. Even trying to use a SQLDataAdapter component with a connection string created successfully in Server Explorer fails when compiled and run.
What the heck is going on?
"Curt_C [MVP]" <software_at_darkfalz.com> wrote in message news:D0**********************************@microsof t.com... I'd suspect its not that it doesnt exist, its that you are being denied. Try looking at this http://www.darkfalz.com/1059 to create the connection string. So this on the VPC session, that way you know you got your access correct before you try to do it with code.
-- Curt Christianson site: http://www.darkfalz.com blog: http://blog.darkfalz.com "peshekeedweller" wrote:
Using asp.net 1.1. vb.net 2003.
I am trying to connect to a remote sql server 2000 on a virtual machine running windows 2000 server. I can connect through the server explorer in visual studio, but cannot connect through code. I have done it before and can not do it now; I don't know what changed. (I also cannot connect to local Access database through code though I can from server explorer.)
The code is: conn = New SqlConnection("data source=SERVERNAME;initial catalog=DATABASE;user id=sa")
Code fails at "conn.open", returning the following error message: "SQL Server does not exist or access denied."
SQL Server authentication is set to "sqlsever and windows" and, of course, the "sa" account exists, with no password (though it doesn't work when I set a password either).
Please help. I'm really getting desperate, here.
Well, may I be the second, one to state that this is happening to ME, over
and over. What is WORSE, is that I can take the same bloody connection
string from an app I just finished, start a new app, do the exact same thing
in the new app, and get the same results as this poor fellow is getting and
it's going to cost me my JOB if I don't solve it!!
So, guess, what, my fellow, its as common as the cold and hurts like being
burned alive!
Sign me pissed off in paradise!
"Curt_C [MVP]" <software_at_darkfalz.com> wrote in message
news:78**********************************@microsof t.com... All of these tests worked from WITHIN the VPC session just fine but the connection string isnt working right? I cant think of a single instance that would cause this. There must be a piece of info we aren't getting... a security setting on the SQL, something...
-- Curt Christianson site: http://www.darkfalz.com blog: http://blog.darkfalz.com "peshekeedweller" wrote:
Curt, I can create a successful connection in the data link wizard; I can create a successful connection in the Vis Studio Server Explorer; I can create a succesful server in the Vis Studio Server Explorer. But none of the connection strings work in code. Even trying to use a SQLDataAdapter component with a connection string created successfully in Server Explorer fails when compiled and run.
What the heck is going on?
"Curt_C [MVP]" <software_at_darkfalz.com> wrote in message news:D0**********************************@microsof t.com... > I'd suspect its not that it doesnt exist, its that you are being > denied. > Try > looking at this http://www.darkfalz.com/1059 to create the connection > string. So this on the VPC session, that way you know you got your > access > correct before you try to do it with code. > > -- > Curt Christianson > site: http://www.darkfalz.com > blog: http://blog.darkfalz.com > > > > "peshekeedweller" wrote: > >> Using asp.net 1.1. vb.net 2003. >> >> I am trying to connect to a remote sql server 2000 on a virtual >> machine >> running windows 2000 server. I can connect through the server explorer >> in >> visual studio, but cannot connect through code. I have done it before >> and >> can not do it now; I don't know what changed. (I also cannot connect >> to >> local Access database through code though I can from server explorer.) >> >> The code is: >> conn = New SqlConnection("data source=SERVERNAME;initial >> catalog=DATABASE;user id=sa") >> >> Code fails at "conn.open", returning the following error message: "SQL >> Server does not exist or access denied." >> >> SQL Server authentication is set to "sqlsever and windows" and, of >> course, >> the "sa" account exists, with no password (though it doesn't work when >> I >> set >> a password either). >> >> Please help. I'm really getting desperate, here. >> >> >> >> >>
peshekeedweller wrote: Sorry Juan, still didin't work. Got exactly the same result.
And it is a development sql server with only 3 users and is not exposed to the internet. That's why I don't assign password to the sa account.
That's funny. I'm sure Slammer didn't only hit servers that were
exposed to the internet. There's a reason why Microsoft make you jump
through more and more hoops to keep the sa password blank these days -
it's poor practice.
Also, why not set up you development server the same way your
production server is set up - you'll have less surprises when you go
live and need to work out what permissions should be set.
Damien
Let's summarize :
You are connecting to a remote ( not on your box ) SQL Server
which is not connected to the internet.
You can connect from within VS.NET, but fail when connecting
from ASP.NET when you use the connection strings : "Data Source=SERVERNAME;Initial Catalog=DATABASE;Persist Security Info=True;User ID=sa;Password="
and "data source=SERVERNAME;initial catalog=DATABASE;user id=sa"
The SQL Server accepts both Windows and SQL Server authentication.
Given these conditions, you are getting denied access because when
ASP.NET connects to your SQL Server the credentials it passes
are those of the user account under which ASP.NET is running
on your IIS Server, and that is *not* the "sa" user, which is the
SQL Server login that's authorized to use your database.
If you can create a SQL Server login which matches your current
ASP.NET account's name *and* password, you'll surpass the
credentials problem.
In practice, though, recreating the ASP.NET password is not an easy task,
because the default setup for ASP.NET sets up an auto-generated password,
and that is a stumbling block to creating a login with the same password for
the ASP.NET account in the SQL Server.
To bypass that problem, you will have to setup a custom account to run
ASP.NET as ( so you can set the password ), enable impersonation,
and setup a login, with *exactly* the same name and password as the
ASP.NET account, in the SQL Server.
Now, in the <process model> section of your web.config, instead of using :
userName="machine" password="AutoGenerate"
you'd use : userName="YourNewASPNETAccount" password="Your7Strong9Pwd"
That way, you can repro the password in your SQL Server login.
See : http://msdn.microsoft.com/library/de...SecNetHT01.asp
for how to do this, including the setting of the security permissions
for the directories to which the ASP.NET account must have access to.
Note: the article refers to v1.0 and that's the directory path used.
Since you are using ASP.NET 1.1, use v1.1.4322 instead.
In summary, you need to :
1. Create a New Local Account
2. Assign Minimum Privileges
3. Assign NTFS Permissions
4. Configure ASP.NET to Run Using the New Account
5. Create a login in your SQL Server with the
same name as your new ASP.NET account.
6. Assign database permissions in the SQL Server to your new login.
You should be able to connect after you do that.
Juan T. Llibre, ASP.NET MVP
ASP.NET FAQ : http://asp.net.do/faq/
Foros de ASP.NET en Español : http://asp.net.do/foros/
======================================
"peshekeedweller" <so*****@somewhere.com> wrote in message
news:kl*******************@fe02.news.easynews.com. .. Sorry Juan, still didin't work. Got exactly the same result.
And it is a development sql server with only 3 users and is not exposed to the internet. That's why I don't assign password to the sa account.
"Juan T. Llibre" <no***********@nowhere.com> wrote in message news:%2****************@tk2msftngp13.phx.gbl... Try :
"Data Source=SERVERNAME;Initial Catalog=DATABASE;Persist Security Info=True;User ID=sa;Password="
instead of
"data source=SERVERNAME;initial catalog=DATABASE;user id=sa"
Although why you would use a blank password for the sa user is beyond me. Juan T. Llibre ASP.NET MVP ASP.NET FAQ : http://asp.net.do/faq/ ==========================
"peshekeedweller" <so*****@somewhere.com> wrote in message news:5n*******************@fe10.news.easynews.com. .. Curt, I can create a successful connection in the data link wizard; I can create a successful connection in the Vis Studio Server Explorer; I can create a succesful server in the Vis Studio Server Explorer. But none of the connection strings work in code. Even trying to use a SQLDataAdapter component with a connection string created successfully in Server Explorer fails when compiled and run.
What the heck is going on?
"Curt_C [MVP]" <software_at_darkfalz.com> wrote in message news:D0**********************************@microsof t.com... I'd suspect its not that it doesnt exist, its that you are being denied. Try looking at this http://www.darkfalz.com/1059 to create the connection string. So this on the VPC session, that way you know you got your access correct before you try to do it with code.
-- Curt Christianson site: http://www.darkfalz.com blog: http://blog.darkfalz.com "peshekeedweller" wrote:
> Using asp.net 1.1. vb.net 2003. > > I am trying to connect to a remote sql server 2000 on a virtual machine > running windows 2000 server. I can connect through the server explorer in > visual studio, but cannot connect through code. I have done it before and > can not do it now; I don't know what changed. (I also cannot connect to > local Access database through code though I can from server explorer.) > > The code is: > conn = New SqlConnection("data source=SERVERNAME;initial > catalog=DATABASE;user id=sa") > > Code fails at "conn.open", returning the following error message: "SQL > Server does not exist or access denied." > > SQL Server authentication is set to "sqlsever and windows" and, of course, > the "sa" account exists, with no password (though it doesn't work when I set > a password either). > > Please help. I'm really getting desperate, here.
I'm sure this has nothing to do with my problem, but thanks for the
condescending lecture.
"Damien" <Da*******************@hotmail.com> wrote in message
news:11********************@o13g2000cwo.googlegrou ps.com... peshekeedweller wrote: Sorry Juan, still didin't work. Got exactly the same result.
And it is a development sql server with only 3 users and is not exposed to the internet. That's why I don't assign password to the sa account.
That's funny. I'm sure Slammer didn't only hit servers that were exposed to the internet. There's a reason why Microsoft make you jump through more and more hoops to keep the sa password blank these days - it's poor practice.
Also, why not set up you development server the same way your production server is set up - you'll have less surprises when you go live and need to work out what permissions should be set.
Damien
For additional information, see : http://msdn.microsoft.com/library/de...aght000008.asp
Juan T. Llibre, ASP.NET MVP
ASP.NET FAQ : http://asp.net.do/faq/
Foros de ASP.NET en Español : http://asp.net.do/foros/
======================================
"Juan T. Llibre" <no***********@nowhere.com> wrote in message
news:un****************@tk2msftngp13.phx.gbl... Let's summarize :
You are connecting to a remote ( not on your box ) SQL Server which is not connected to the internet.
You can connect from within VS.NET, but fail when connecting from ASP.NET when you use the connection strings :
"Data Source=SERVERNAME;Initial Catalog=DATABASE;Persist Security Info=True;User ID=sa;Password=" and "data source=SERVERNAME;initial catalog=DATABASE;user id=sa"
The SQL Server accepts both Windows and SQL Server authentication.
Given these conditions, you are getting denied access because when ASP.NET connects to your SQL Server the credentials it passes are those of the user account under which ASP.NET is running on your IIS Server, and that is *not* the "sa" user, which is the SQL Server login that's authorized to use your database.
If you can create a SQL Server login which matches your current ASP.NET account's name *and* password, you'll surpass the credentials problem.
In practice, though, recreating the ASP.NET password is not an easy task, because the default setup for ASP.NET sets up an auto-generated password, and that is a stumbling block to creating a login with the same password for the ASP.NET account in the SQL Server.
To bypass that problem, you will have to setup a custom account to run ASP.NET as ( so you can set the password ), enable impersonation, and setup a login, with *exactly* the same name and password as the ASP.NET account, in the SQL Server.
Now, in the <process model> section of your web.config, instead of using :
userName="machine" password="AutoGenerate"
you'd use : userName="YourNewASPNETAccount" password="Your7Strong9Pwd"
That way, you can repro the password in your SQL Server login.
See : http://msdn.microsoft.com/library/de...SecNetHT01.asp for how to do this, including the setting of the security permissions for the directories to which the ASP.NET account must have access to.
Note: the article refers to v1.0 and that's the directory path used. Since you are using ASP.NET 1.1, use v1.1.4322 instead.
In summary, you need to :
1. Create a New Local Account 2. Assign Minimum Privileges 3. Assign NTFS Permissions 4. Configure ASP.NET to Run Using the New Account 5. Create a login in your SQL Server with the same name as your new ASP.NET account. 6. Assign database permissions in the SQL Server to your new login.
You should be able to connect after you do that. Juan T. Llibre, ASP.NET MVP ASP.NET FAQ : http://asp.net.do/faq/ Foros de ASP.NET en Español : http://asp.net.do/foros/ ======================================
"peshekeedweller" <so*****@somewhere.com> wrote in message news:kl*******************@fe02.news.easynews.com. .. Sorry Juan, still didin't work. Got exactly the same result.
And it is a development sql server with only 3 users and is not exposed to the internet. That's why I don't assign password to the sa account.
"Juan T. Llibre" <no***********@nowhere.com> wrote in message news:%2****************@tk2msftngp13.phx.gbl... Try :
"Data Source=SERVERNAME;Initial Catalog=DATABASE;Persist Security Info=True;User ID=sa;Password="
instead of
"data source=SERVERNAME;initial catalog=DATABASE;user id=sa"
Although why you would use a blank password for the sa user is beyond me. Juan T. Llibre ASP.NET MVP ASP.NET FAQ : http://asp.net.do/faq/ ==========================
"peshekeedweller" <so*****@somewhere.com> wrote in message news:5n*******************@fe10.news.easynews.com. .. Curt, I can create a successful connection in the data link wizard; I can create a successful connection in the Vis Studio Server Explorer; I can create a succesful server in the Vis Studio Server Explorer. But none of the connection strings work in code. Even trying to use a SQLDataAdapter component with a connection string created successfully in Server Explorer fails when compiled and run.
What the heck is going on?
"Curt_C [MVP]" <software_at_darkfalz.com> wrote in message news:D0**********************************@microsof t.com... > I'd suspect its not that it doesnt exist, its that you are being denied. Try > looking at this http://www.darkfalz.com/1059 to create the connection > string. So this on the VPC session, that way you know you got your access > correct before you try to do it with code. > > -- > Curt Christianson > site: http://www.darkfalz.com > blog: http://blog.darkfalz.com > > > > "peshekeedweller" wrote: > >> Using asp.net 1.1. vb.net 2003. >> >> I am trying to connect to a remote sql server 2000 on a virtual machine >> running windows 2000 server. I can connect through the server explorer in >> visual studio, but cannot connect through code. I have done it before and >> can not do it now; I don't know what changed. (I also cannot connect to >> local Access database through code though I can from server explorer.) >> >> The code is: >> conn = New SqlConnection("data source=SERVERNAME;initial >> catalog=DATABASE;user id=sa") >> >> Code fails at "conn.open", returning the following error message: "SQL >> Server does not exist or access denied." >> >> SQL Server authentication is set to "sqlsever and windows" and, of course, >> the "sa" account exists, with no password (though it doesn't work when I set >> a password either). >> >> Please help. I'm really getting desperate, here.
peshekeedweller wrote: I'm sure this has nothing to do with my problem, but thanks for the condescending lecture.
I'm sorry that you took offence. Part of my attitude is probably
because I'm tasked, within our team, to maintain "best practice" with
the other developers, and so I'm more likely to advance un-asked-for
advice.
But when it comes to something as simple as Slammer, and as simple as
having blank sa passwords, I get a bit more riled up. It's a simple
rule - if all your security relies on the firewall, then sooner or
later, you're going to get burned. So I don't apologise for that.
Damien
My security doesn't rely on a firewall. My security relies on the fact that
none of my development machines are even connected (no wires, no antennas)
to the internet. Don't assume facts not in evidence.
"Damien" <Da*******************@hotmail.com> wrote in message
news:11**********************@o13g2000cwo.googlegr oups.com... peshekeedweller wrote: I'm sure this has nothing to do with my problem, but thanks for the condescending lecture. I'm sorry that you took offence. Part of my attitude is probably because I'm tasked, within our team, to maintain "best practice" with the other developers, and so I'm more likely to advance un-asked-for advice.
But when it comes to something as simple as Slammer, and as simple as having blank sa passwords, I get a bit more riled up. It's a simple rule - if all your security relies on the firewall, then sooner or later, you're going to get burned. So I don't apologise for that.
Damien
By the way, can you help me with my problem?
"Damien" <Da*******************@hotmail.com> wrote in message
news:11**********************@o13g2000cwo.googlegr oups.com... peshekeedweller wrote: I'm sure this has nothing to do with my problem, but thanks for the condescending lecture. I'm sorry that you took offence. Part of my attitude is probably because I'm tasked, within our team, to maintain "best practice" with the other developers, and so I'm more likely to advance un-asked-for advice.
But when it comes to something as simple as Slammer, and as simple as having blank sa passwords, I get a bit more riled up. It's a simple rule - if all your security relies on the firewall, then sooner or later, you're going to get burned. So I don't apologise for that.
Damien
I've tried to, but you prefer to argue with Damien.
Have you read my replies ?
Juan T. Llibre, ASP.NET MVP
ASP.NET FAQ : http://asp.net.do/faq/
Foros de ASP.NET en Español : http://asp.net.do/foros/
======================================
"peshekeedweller" <so*****@somewhere.com> wrote in message
news:UV*******************@fe09.news.easynews.com. .. By the way, can you help me with my problem?
"Damien" <Da*******************@hotmail.com> wrote in message news:11**********************@o13g2000cwo.googlegr oups.com... peshekeedweller wrote: I'm sure this has nothing to do with my problem, but thanks for the condescending lecture. I'm sorry that you took offence. Part of my attitude is probably because I'm tasked, within our team, to maintain "best practice" with the other developers, and so I'm more likely to advance un-asked-for advice.
But when it comes to something as simple as Slammer, and as simple as having blank sa passwords, I get a bit more riled up. It's a simple rule - if all your security relies on the firewall, then sooner or later, you're going to get burned. So I don't apologise for that.
Damien
Yes Juan, I read your reply and tried your suggestion. It didn't work. As I
said, I can connect and access data from the Server Explorer. I can create
data connections and can create servers to the sql server; both work as
expected, but cannot access through code even when I use a dataadaptor
component set to connect through a valid connection in the Server Explorer.
Very frustrating.
"Juan T. Llibre" <no***********@nowhere.com> wrote in message
news:uH**************@tk2msftngp13.phx.gbl... I've tried to, but you prefer to argue with Damien.
Have you read my replies ? Juan T. Llibre, ASP.NET MVP ASP.NET FAQ : http://asp.net.do/faq/ Foros de ASP.NET en Español : http://asp.net.do/foros/ ====================================== "peshekeedweller" <so*****@somewhere.com> wrote in message news:UV*******************@fe09.news.easynews.com. .. By the way, can you help me with my problem?
"Damien" <Da*******************@hotmail.com> wrote in message news:11**********************@o13g2000cwo.googlegr oups.com... peshekeedweller wrote: I'm sure this has nothing to do with my problem, but thanks for the condescending lecture.
I'm sorry that you took offence. Part of my attitude is probably because I'm tasked, within our team, to maintain "best practice" with the other developers, and so I'm more likely to advance un-asked-for advice.
But when it comes to something as simple as Slammer, and as simple as having blank sa passwords, I get a bit more riled up. It's a simple rule - if all your security relies on the firewall, then sooner or later, you're going to get burned. So I don't apologise for that.
Damien
You implemented the account impersonation procedure, as outlined at : http://msdn.microsoft.com/library/de...SecNetHT01.asp
?
And you performed all of the steps :
1. Create a New Local Account and assign a password to it
2. Assign Minimum Privileges to the account
3. Assign NTFS Permissions to the account for the appropiate directories
4. Configure ASP.NET to Run Using the New Account
5. Create a login in your SQL Server with the
same name and password as your new ASP.NET account.
6. Assign database permissions in the SQL Server to your new login.
....and it didn't work ?
Juan T. Llibre, ASP.NET MVP
ASP.NET FAQ : http://asp.net.do/faq/
Foros de ASP.NET en Español : http://asp.net.do/foros/
======================================
"peshekeedweller" <so*****@somewhere.com> wrote in message
news:Fx*******************@fe05.news.easynews.com. .. Yes Juan, I read your reply and tried your suggestion. It didn't work. As I said, I can connect and access data from the Server Explorer. I can create data connections and can create servers to the sql server; both work as expected, but cannot access through code even when I use a dataadaptor component set to connect through a valid connection in the Server Explorer. Very frustrating.
"Juan T. Llibre" <no***********@nowhere.com> wrote in message news:uH**************@tk2msftngp13.phx.gbl... I've tried to, but you prefer to argue with Damien.
Have you read my replies ? Juan T. Llibre, ASP.NET MVP ASP.NET FAQ : http://asp.net.do/faq/ Foros de ASP.NET en Español : http://asp.net.do/foros/ ====================================== "peshekeedweller" <so*****@somewhere.com> wrote in message news:UV*******************@fe09.news.easynews.com. .. By the way, can you help me with my problem?
"Damien" <Da*******************@hotmail.com> wrote in message news:11**********************@o13g2000cwo.googlegr oups.com...
peshekeedweller wrote: > I'm sure this has nothing to do with my problem, but thanks for the > condescending lecture. > I'm sorry that you took offence. Part of my attitude is probably because I'm tasked, within our team, to maintain "best practice" with the other developers, and so I'm more likely to advance un-asked-for advice.
But when it comes to something as simple as Slammer, and as simple as having blank sa passwords, I get a bit more riled up. It's a simple rule - if all your security relies on the firewall, then sooner or later, you're going to get burned. So I don't apologise for that.
Damien
This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics
by: mdurliSPAMFILTER |
last post by:
Hello,
I developed a win32 .exe CGI that connects to a clustered SQLServer to
report some data.
The software is written with Borland C++Builder.
This is the oledb string:...
|
by: Roy Gourgi |
last post by:
Hi,
I need to store and retrieve information from a database. It looks as though
there is a lot more support for SQLServer than there is for Access, correct
me if I am wrong.
What do I have...
|
by: Lior |
last post by:
Hi, I have an ASP.NET website that crashes under heavy load.
I use a SQL Server DB. I get around 5500 hits per day. I keep getting the
timeout expieried connection pool error. Sometimes it even...
|
by: Dan Sikorsky |
last post by:
Can I use SQLServer 2000 with ASP.NET 2.0 instead of SQLServer 2005, and use
the .Net 2.0 Membership functionality?
I've setup my Login page, controls, etc., and now it's time to use the Web...
|
by: dgk |
last post by:
I'm using the standard provider for membership which is SQLServer
Express. After deploying the app to our server, login fails because of
an SQL problem. I'm guessing that the problem is that the...
|
by: alingsjtu |
last post by:
Hello, every body.
When execute dynamic generated multiple OPENQUERY statements (which
linkes to DB2) in SQLServer, I always got SQL1040N The maximum number
of applications is already connected...
|
by: =?Utf-8?B?SmVmZnJleQ==?= |
last post by:
How to configure the IIS, ASPNET userID, Windows or SQL Authentiation, std or
integrated security for SQLserver database?
The VS.net 2002 web server and SQL Server client are at the same PC, ...
|
by: GaryDean |
last post by:
I have a 2.0 Website application in the dev environment that uses a SQL
Server 2005 DB and also uses the authentication controls and classes that
automatically use SQLServer Express. It all works...
|
by: adjo |
last post by:
I am working on an app with an Access2002 frontend and Sql2005
backend. I have to use integrated security. I want to prevent my users
from altering data in another way than via the frontend.
It...
|
by: taylorcarr |
last post by:
A Canon printer is a smart device known for being advanced, efficient, and reliable. It is designed for home, office, and hybrid workspace use and can also be used for a variety of purposes. However,...
|
by: Charles Arthur |
last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
|
by: ryjfgjl |
last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
|
by: BarryA |
last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
|
by: nemocccc |
last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
|
by: Sonnysonu |
last post by:
This is the data of csv file
1 2 3
1 2 3
1 2 3
1 2 3
2 3
2 3
3
the lengths should be different i have to store the data by column-wise with in the specific length.
suppose the i have to...
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
|
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers,...
| |