Re: Webservice SQL logon fails on production IIS server

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Martin Kulov (kulov_at_bezbokluk.abv.bg)
Date: 02/11/05


Date: Fri, 11 Feb 2005 21:59:27 +0200

Hi Tim,
Sorry I haven't read quite carefully.

Do you have the two machines in one domain? Or they are just in workgroup.

-- 
Martin Kulov
http://www.codeattest.com
MCAD Charter Member
MCSD.NET Early Achiever
MCSD
"Tim Baley" <TimBaley@discussions.microsoft.com> wrote in message
news:D7751B42-C681-47C1-B076-A99314957861@microsoft.com...
> Hi Martin,
>
> Thanks for your quick response.  Anonymous access is not enabled on any of
> the intranet IIS web services.  Our intent is to use Windows integrated
> authentication for  SQL  Server  authentication because the stored
procedures
> use the SQL login  user for audit info.
>
> The web services work correctly (including audit trail) when they are
hosted
> on  my development  machine.  They also work correctly when the services
are
> hosted on an IIS server on the same machine as the SQL Server.  By
> "correctly" I mean that the procedures work as intended and show the
domain
> account of the executing client in the audit trail.  In the scenario you
> suggest, they would always show the webservice account  in the audit
trail.
>
> The problem occurs when the webservice is hosted on a different server
than
> the SQL Server.  SysAdmin doesn't want anything but SQL Server on the
> database machine.  I hope this clarifies my problem.
>
> Thanks again for the quick response!
>
> Tim Bailey
> Energy Laboratories, Inc.
>
> The problem
> "Martin Kulov" wrote:
>
> > Hi Tim,
> >
> > Go to your Web Service virtual directory in IIS management console. Open
> > Properties and click on tab Directory Security. In the Enable anonymous
> > access select account that has rights to call the SQL server.
> >
> > HTH,
> >
> > -- 
> > Martin Kulov
> > http://www.codeattest.com
> >
> > MCAD Charter Member
> > MCSD.NET Early Achiever
> > MCSD
> >
> >
> >
> >
> > "Tim Baley" <TimBaley@discussions.microsoft.com> wrote in message
> > news:95CE7F79-3C8F-4C56-BCAF-A42239467636@microsoft.com...
> > > I recently created some intranet web sevices to expose stored
procedures
> > on
> > > our SQL Servers (SQL2k).  The stored procedures include an audit trail
> > with
> > > user/login identification, so the web services are set up for Windows
> > > integrated authentication.  The web sevices work well when they are
hosted
> > on
> > > IIS on my Win2k Pro development machine.  I have tried accessing the
> > services
> > > under several user accounts on several machines, including machines in
> > other
> > > zones connected by VPN.  I have connected the webservices to different
SQL
> > > servers.
> > >
> > > When I move the services to production IIS servers, the database
> > connection
> > > step throws an exception "Login failed for user 'NT
AUTHORITY\ANONYMOUS
> > > LOGON'".  The web service on the production service is not flowing the
> > user
> > > credentials through to SQL server.  What do I need to do to get the
> > service
> > > to work?
> > >
> > > Thanks,
> > > Tim Bailey
> > > Energy Laboratories, Inc.
> >
> >


Relevant Pages

  • Re: Webservice SQL logon fails on production IIS server
    ... authentication for SQL Server authentication because the stored procedures ... The web services work correctly when they are hosted ... hosted on an IIS server on the same machine as the SQL Server. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: [Sql Server 2008 RCO]Where is SSMS ?
    ... you have three machines that you are trying to install SQL Server 2008 X Edition instance. ... SSMS 2005 and SSMS 2008 CTP6. ...
    (microsoft.public.sqlserver.tools)
  • Re: How to disable ctrl-alt-del in a screen saver application
    ... Windows machines, the problem can be easily solved without you writing any ... each company user should have a domain user account. ... Each user in the SQL Server database is a domain user (or should ...
    (microsoft.public.dotnet.framework.windowsforms)
  • Re: firewall with low CPU usage
    ... On my desktop computer using Win2k, I have 15 active applications running ... MS SQL Server, along with IIS services, which are not open to the public, ... BlackIce Defender 3.5 is on both machines, ... I must say that I have not looked at CPU usage when I am doing that, ...
    (comp.security.firewalls)
  • Re: SQL Server trust connection failed in Windows 2003 for ASP.NET
    ... >where to set SQL Server DB permission for machine.config account since it ... >does show in the user list when I tried to add this account to SQL Server new ... >for SQL Server trust connection without impersonation. ... >machine.config for both machines. ...
    (microsoft.public.sqlserver.connect)