Craig
We have done this and used mixed mode authentication. To make a safe
connection from the IIS server to the Database server we stored the
necessary USERID/PASSWORD information together with the name of the database
server in the registry on the IIS server. It is fairly easy to retrieve this
information on connecting to the database server.
Good luck.
Pim Zwaard
-----Original Message-----
From: CBerko [mailto:mssqldba-ezmlmshield-x82347552.[Email address protected]
Sent: vrijdag 25 februari 2005 15:47
To: LazyDBA Discussion
Subject: IIS And SQL Server
What I am trying to do is have my web pages run on a dedicated IIS server
and have them access SQL databases on separate SQL Servers. I want to use
Windows Authentication to control access to the data since this is strictly
an intranet site.
Here is what I have tried so far:
If I run IIS on the same box as SQL Server, I have no problems.
However, as soon as I try to run the WebPages from a separate IIS server,
the problems begin. The only way that I have been able to get it to work so
far is to do the following:
Change SQL Server so that it is running in Windows Authentication mode only.
Set up IIS to use an anonymous login account with access to the database.
This is a domain user account.
Check the "Use Anonymous Login" AND "Windows Authentication" checkbox on the
IIS
If I set SQL Server to run in mixed mode, then I get a Login failed for user
'NT AUTHORITY\ANONYMOUS LOGON'. error
If I leave SQL Server in Windows Authentication only mode and uncheck the
Anonymous Login, I get a Login failed for user 'NT AUTHORITY\ANONYMOUS
LOGON' error
My web.config has the following line in the Authentication Section:
<authentication mode="Windows" />
What steps do I have to take to set up SQL Server and IIS on separate boxes
when I can leave my SQL Server in Mixed Mode and have IIS connect with
Windows Authentication?
Thanks,
Craig Berko
SQL Server DBA / Software Engineer
The MHA Group
(469) 759-8551
---------------------------------------------------------------------
TO REPLY TO EVERBODY , PLEASE CLICK REPLY-ALL, NOT JUST REPLY
Website : http://www.LazyDBA.com
To unsubscribe: http://www.lazydba.com/unsubscribe.html
For additional commands, e-mail: mssqldba-[Email address protected]
MS Sql Server LazyDBA home page