how to hash impersonated password

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Mark (mfield_at_idonotlikespam.cce.umn.edu)
Date: 02/06/04


Date: Fri, 6 Feb 2004 09:01:33 -0600

We're going to use impersonation in our web.config file to connect via
windows authentication to a SQL Server on the same domain. We'd like to
hash the password rather than store it in plain text in the web.config file
.... suggestions?

<identity impersonate="true" userName="mydomain\myuser" password="mypass"/>

Thanks in advance!

Mark



Relevant Pages

  • Re: Login failed for user MachineNameASPNET
    ... > Or is your SQL Server not on the same network? ... > Really impersonation is the best way, but I do remember a Visual Studio ... >> windows authentication to log into the site, ... >> programmatically override asp.net from providing the MachineName\ASPNET ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Login failed for user MachineNameASPNET
    ... If you are using Windows Authentication for the site, ... Or is your SQL Server not on the same network? ... Really impersonation is the best way, but I do remember a Visual Studio ... > user name to the SQL Server user accounts. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Transmission of Username & Password?
    ... My understanding of Windows Authentication with SQL Server is that the ... only the one-way hash value. ... value that the client sends to the Domain Controller for authentication. ...
    (microsoft.public.sqlserver.security)
  • RE: Problem With Web Service
    ... Do you use windows authentication for connecting to the sql server? ... Do you use impersonation in the web application? ... If the web service is implemented in a different project and you use windows ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Credentials not being passed with remote access
    ... allowed windows authentication to work, ... I had assumed johnx was a domain user rather than a local Windows account. ... johnx was set up as a local login on sql server. ...
    (microsoft.public.sqlserver.security)