Authentication over internet - Windows or SQL?

  • Hi,

    I am familiar with SQL Server but I am new to all of its administration stuff. I am developing an internet application using ASP.Net, Windows 2003 server and SQL Server. I have a question regarding users and authentication. For an internet application do I have to use SQL Server authenticaiton? In a documentation I read 'SQL Server Authentication may be required for connections with clients other than Windows clients.' But when users request for a dynamic webpage, it is my Windows 2003 server that connects to the SQL Server database. So I was thinking Windows authentication is enough. Am I right? If not, can you please explain.

    Thanks

     

  • You can use either with the IIS server connecting to the SQL Server. Not sure about the actual end user, but I suppose if they connect to IIS using Windows Auth, that can pass through to the SQL Server.

  • If you want to use anonymous access in IIS and use windows authentication, change the user which IIS uses to connect to the server to a valid windows user which has access to SQL server. This will allow you to use windows authentication and you will also not have to worry about sending the username/password over the network.

  • Thanks for your reply.

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply