Prev: Validators
Next: File Upload Folder Permissions
From: Marek G. on 22 Mar 2010 16:40
Hi all , I have big trouble with impersonate IIS and SQL 2008 . I connect to
the iis where I set the ASP.NET Impersonate and I want connect to the sql
server with user credetionals . And there is trouble . SQL server run in the
win 2008R2 cluster ... I try set delegation in the Active directory on the
cluster server and in the cluster application .... Not work :-( . Connect to
the SQL server with anonymous user :-( . Why ????
thank you form answer

marek

From: Andy O'Neill on 22 Mar 2010 17:22

"Marek G." <grolms(a)volny.cz> wrote in message
news:%23nqas$fyKHA.5940(a)TK2MSFTNGP02.phx.gbl...
> Hi all , I have big trouble with impersonate IIS and SQL 2008 . I connect
> to the iis where I set the ASP.NET Impersonate and I want connect to the
> sql server with user credetionals . And there is trouble . SQL server run
> in the win 2008R2 cluster ... I try set delegation in the Active directory
> on the cluster server and in the cluster application .... Not work :-( .
> Connect to the SQL server with anonymous user :-( . Why ????
> thank you form answer
>
> marek
Double hop.
User credentials are only passed once unless you use kerberos.
So they get to the web server and that's as far as they're going.
Most web apps don't rely on impersonation for this reason.

From: Marek G. on 22 Mar 2010 18:52
Oki and how i set the double hop ??? The app is domain application ...

"Andy O'Neill" <aon14nocannedmeat(a)lycos.co.uk> wrote in message
news:ccRpn.147578$1X5.74378(a)newsfe04.ams2...
>
> "Marek G." <grolms(a)volny.cz> wrote in message
> news:%23nqas$fyKHA.5940(a)TK2MSFTNGP02.phx.gbl...
>> Hi all , I have big trouble with impersonate IIS and SQL 2008 . I connect
>> to the iis where I set the ASP.NET Impersonate and I want connect to the
>> sql server with user credetionals . And there is trouble . SQL server run
>> in the win 2008R2 cluster ... I try set delegation in the Active
>> directory on the cluster server and in the cluster application .... Not
>> work :-( . Connect to the SQL server with anonymous user :-( . Why ????
>> thank you form answer
>>
>> marek
> Double hop.
> User credentials are only passed once unless you use kerberos.
> So they get to the web server and that's as far as they're going.
> Most web apps don't rely on impersonation for this reason.

From: Andy O'Neill on 23 Mar 2010 04:46

"Marek G." <grolms(a)volny.cz> wrote in message
news:e1wMTJhyKHA.1236(a)TK2MSFTNGP06.phx.gbl...
> Oki and how i set the double hop ??? The app is domain application ...

Client to web server = 1 hop.
Web server to sql server = 2 hop.

 | 
Pages: 1
Prev: Validators
Next: File Upload Folder Permissions