Re: Webservice SQL logon fails on production IIS server

From: Tim Baley (TimBaley_at_discussions.microsoft.com)
Date: 02/11/05

  • Next message: Martin Kulov: "Re: Webservice SQL logon fails on production IIS server" 
    Date: Fri, 11 Feb 2005 10:03:02 -0800

    Hi Martin,

    Thanks for your quick response. Anonymous access is not enabled on any of
    the intranet IIS web services. Our intent is to use Windows integrated
    authentication for SQL Server authentication because the stored procedures
    use the SQL login user for audit info.

    The web services work correctly (including audit trail) when they are hosted
    on my development machine. They also work correctly when the services are
    hosted on an IIS server on the same machine as the SQL Server. By
    "correctly" I mean that the procedures work as intended and show the domain
    account of the executing client in the audit trail. In the scenario you
    suggest, they would always show the webservice account in the audit trail.

    The problem occurs when the webservice is hosted on a different server than
    the SQL Server. SysAdmin doesn't want anything but SQL Server on the
    database machine. I hope this clarifies my problem.

    Thanks again for the quick response!

    Tim Bailey
    Energy Laboratories, Inc.

    The problem
    "Martin Kulov" wrote:

    > Hi Tim,
    >
    > Go to your Web Service virtual directory in IIS management console. Open
    > Properties and click on tab Directory Security. In the Enable anonymous
    > access select account that has rights to call the SQL server.
    >
    > HTH,
    >
    > --
    > Martin Kulov
    > http://www.codeattest.com
    >
    > MCAD Charter Member
    > MCSD.NET Early Achiever
    > MCSD
    >
    >
    >
    >
    > "Tim Baley" <TimBaley@discussions.microsoft.com> wrote in message
    > news:95CE7F79-3C8F-4C56-BCAF-A42239467636@microsoft.com...
    > > I recently created some intranet web sevices to expose stored procedures
    > on
    > > our SQL Servers (SQL2k). The stored procedures include an audit trail
    > with
    > > user/login identification, so the web services are set up for Windows
    > > integrated authentication. The web sevices work well when they are hosted
    > on
    > > IIS on my Win2k Pro development machine. I have tried accessing the
    > services
    > > under several user accounts on several machines, including machines in
    > other
    > > zones connected by VPN. I have connected the webservices to different SQL
    > > servers.
    > >
    > > When I move the services to production IIS servers, the database
    > connection
    > > step throws an exception "Login failed for user 'NT AUTHORITY\ANONYMOUS
    > > LOGON'". The web service on the production service is not flowing the
    > user
    > > credentials through to SQL server. What do I need to do to get the
    > service
    > > to work?
    > >
    > > Thanks,
    > > Tim Bailey
    > > Energy Laboratories, Inc.
    >
    >

  • Next message: Martin Kulov: "Re: Webservice SQL logon fails on production IIS server"

    Relevant Pages

    • Windows Authentication with IIS on separate machines
      ... Yes, setting Basic Authentication in IIS works, but the ... >in SQL server but doesn't work if user account was ... >imported from a Windows account. ...
      (microsoft.public.sqlserver.security)
    • Re: Authentication problem
      ... As matt notes below, even if nothing on your box has changed it's possible ... > On your IIS box, check the HTTP Authentication tab of the SQL Server ...
      (microsoft.public.sqlserver.ce)
    • RE: IIS (ASP) -> SQLServer Authentication Issue
      ... I understand that you'd like to use IIS Intergration authentication in the ... and ASP "impersonates" authencitaed users to access SQL Server on ... only kerberos authentication allows double-hops from clients ...
      (microsoft.public.sqlserver.security)
    • IIS vs ASP.Net Authentication problem
      ... Requirement is to use 'domain\iisuser' to authenticate in SQL Server ... Only Integrated Windows Authentication enabled (Anonymous/basic/digest ... unchecked) in IIS 5 ... Login failed for user 'CCMIWS05\ASPNET'. ...
      (microsoft.public.dotnet.security)
    • RE: Interdev not creating project (authenticate failure)
      ... | 1st Computer (for SQL Server and IIS): ... | Member of: Administrators ... Also in IIS console, rightclick the web site and go to properties/directory ... Integrated Windows and check Basic authentication. ...
      (microsoft.public.inetserver.iis.security)
    • Quantcast