473,322 Members | 1,736 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,322 software developers and data experts.

Blank Password Policy problem

Hi all,

We recently started to receive complaints about our install project not
working and giving and shitload of error messages related to SQL. We
later found out that the problem was the users we were trying to bind
to we're not created because of the domain password policy feature
implemented into SQL Server 2005.

After much dabbling around the SQL scripts that created the database
structure, we came to the conclusion that only this piece of code could
correct our problem :

CREATE LOGIN mynewuser WITH PASSWORD = '', CHECK_POLICY = OFF,
CHECK_EXPIRATION = OFF

This runs perfectly fine on SQL2005, but not on SQL2000. We have been
searching for a way to have code in SQL files executed on install that
doesn't fail to compile when run against the server and that will
bypass the password policy in case it's a SQL Server 2005...

Right now we are testing a feature available in MSI that can filter
scripts not matching a database version, but the problem with this, is
that we are missing a lot of features that InstallShield has. In short,
we need Help to fix this issue and be able to continue with
development.

In hopes to receive a a prompt anwser

Oct 2 '06 #1
3 2539
Oh and by the way, the SQL2000 code we use is the following:

exec sp_addlogin N'mynewuser', null, @logindb, @loginlang

PS : @logindb and @loginlang are valid variables that contain correct
info for this SP to work

Oct 2 '06 #2
crazyone wrote:
Oh and by the way, the SQL2000 code we use is the following:

exec sp_addlogin N'mynewuser', null, @logindb, @loginlang

PS : @logindb and @loginlang are valid variables that contain correct
info for this SP to work

Why not just set a sensible password to start with? The same password
for each login if you like (anything must be better than a blank
password). Have you ever had a security audit?

Otherwise I think having two versions of your code may be your only
option.

--
David Portas, SQL Server MVP

Whenever possible please post enough code to reproduce your problem.
Including CREATE TABLE and INSERT statements usually helps.
State what version of SQL Server you are using and specify the content
of any error messages.

SQL Server Books Online:
http://msdn2.microsoft.com/library/m...S,SQL.90).aspx
--

Oct 2 '06 #3
My boss produced the code linking to the database with THAT user, it's
a read-only user but doesn't have password. I don't feel it's safe too,
but my boss doesn't want to recode the app to change the password, but
he does want me to spend (up to now) 20 hours to remake the install
software and the sql scripts... strange no?

Oct 2 '06 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

3
by: Phil W | last post by:
Hi, I'm a bit of a newbie to PHP and mySQL. I'm trying to get things running on my W2K machine. I'm having a problem using the mysql_connect() function (although the problem's probably rooted in...
0
by: Lim Eng Teik | last post by:
I was asked by a client to make changes for their Outlook Web Access page where I need to validate Expiry Date of the Password and also the Password Length for the NT Account Policy. Initially I...
6
by: Paul Robinson | last post by:
I am developing a website in ASP that connects to a Sybase database. However, when I try to open a connection to the database the page will not load. The script does not timeout, nor the...
2
by: Joseph Braganza | last post by:
I have forgotten my administration password on XP. Is there any solution?
5
by: Crayon Coco | last post by:
Hi, I just want to check is it OK to set the password for ASPNET of my web server, will it impact my program
2
by: James | last post by:
We have our own set of users and passwords for our application and we want to implement strong passwords. My question is can you access the windows password policy settings in order to validate a...
2
by: V_S_H_Satish | last post by:
Dear Friends In db2, is it possible to put password security policy. Like password must contain with all mixed characters (alphabets, special characters, numerics) and password should not be...
1
by: mbrand | last post by:
I've looked through everything I can find about this subject but nothing has resolved my problem. All I'm trying to do is access a webservice from a client app with the credentials of the person...
0
by: =?Utf-8?B?SmFzb24gUmljaG1laWVy?= | last post by:
Can someone provide me with a code snippet of how to retrieve the password policy for an instance of ADAM? I have found a few articles that explain how to do this in Active Directory but they...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.