Windows Authentication problem

Question

Windows Authentication problem

npmj

Newbie

Points: 2
More actions
September 27, 2002 at 10:01 am

#101263

When accessing ASP.NET web pages connecting to an sql server the connection is not allowed if we use Windows authentication in IIS5. If we change to Basic Authentication then sql server responds correctly. Looking at the traces the domain\username are getting to the web server correctly, but then not to the SQL server (both are machines in the same domain and both are w2k server)
The error message I get is "user 'null' is not associated with a trusted SQL connection".
Any ideas?

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply

Steve Jones - SSC Editor SSC Guru Points: 736255 More actions · Answer 1

Are you using Windows and Basic? I have a similar problems. The sysadmin accounts work with Windows, but the normal accounts do not unless I enable Basic. Not a huge deal on the internal LAN, but annoying.

Haven't found a fix.

Steve Jones

sjones@sqlservercentral.com

http://www.sqlservercentral.com/columnists/sjones

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 2

Sounds like a double-hop issue. Are you still under an NT 4 domain or has your organization gone to Active Directory with Kerberos?

K. Brian Kelley

http://www.truthsolutions.com/

Author: Start to Finish Guide to SQL Server Performance Monitoring

http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1

K. Brian Kelley
@kbriankelley

npmj Newbie Points: 2 More actions · Answer 3

AD And Kerberos.

quote:
Sounds like a double-hop issue. Are you still under an NT 4 domain or has your organization gone to Active Directory with Kerberos?
K. Brian Kelley
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server Performance Monitoring
http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 4

Try the following MSDN article. It documents how to use account impersonation with ASP.NET:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/vsent7/html/vxconImpersonation.asp

Also from the developer's guide:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cpconaspnetimpersonation.asp

This KB article describes the issue:

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q176377

Also take a look at the following to setup delegation:

http://www.microsoft.com/windows2000/techinfo/reskit/en/Distrib/dsce_ctl_awdg.htm

K. Brian Kelley

http://www.truthsolutions.com/

Author: Start to Finish Guide to SQL Server Performance Monitoring

http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1

K. Brian Kelley
@kbriankelley