Possible Multiple Hop Issue

[Nick Zdunic]

I may have come across from what I have heard is the 'Multiple Hop'
delegation issue.

I'll explain the situation somewhat:

We have a SharePoint Portal setup.
The client wants to use Page Viewer web parts to view other web sites.
The client wants to use integrated security as much as possible.
The page viewer is looking at another website.

The website presents some data drawn from a SQL Server database. This site
uses Windows Authentication in IIS and identity impersonation set to true.

SQL Server is setup for Integrated Security. The Website is located on the
same machine as SharePoint. SQL Server is on another machine. AD Directory
has been setup to allow delegation between the two machines.

Authentication is working fine, I can always get in. Except with a slight
difference between a couple of scenarios.

The first scenario involves me logging onto a PC on the local domain. I
browse to the portal and login when the login dialogue is presented. I then
go to page with the pag viewer into the secondary website and all is fine - I
see the data.

The second scenario is the same except with the important difference is that
the PC I'm using logs into my companies domain when I start up (comms via a
VPN whch should be a problem). I then browse to the portal on the clients
intranet and login when the login dialogue is presented with credentials
supplied by the client. Browsing to the Page Viewer in questions presents me
with a secondary login dialogue - challenging me to login. I login with the
same credentials and all is fine I see the data.

So the problem is to remove this second login dialogue. Some initial advice
suggests this is the Multiple Hop problem. Windows will not more than one
hop before asking for credentials again - some basic security.

So how do we get around this then?