Re: NTLM authentication

"webrod" <rodolphe.aoustin@xxxxxxxxx> wrote in message news:1167896693.425356.69600@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
AFAIK WSE 3.0 does not support NTLM, why not use Kerberos?

I forgot to answer to your question.
I can't use kerberos because I am on a Winnt system based on NTML not
kerberos.

I don't get it, this is a local intranet and you are only running SQL on a server which is not a Domain member and you want to authenticate windows (local )accounts using NTLM (that is SQL integrated security)?
Well, I'm afraid the answer is - you can't use WSE 3.0 without IIS hosting for this. One (the best long term) option is to use WCF, which supports SSPI and SPNEGO, that means it can authenticate using Kerberos and fallback to NTLM when not available.
Another option is to drop your DAL into a COM+ server application (using System.EnterpriseServices) and use ADAM with LDAP "authentication" in order to implement role based authorization. The COM+ server can run with "Windows" account credentials having access to SQL server. Note that you'll need to use SSL authentication between the client and the WSE service, if you want to make this secure, it makes littel sense to protect SQL access when one can catch the clear text password traveling between client and server.



Willy.


.

Relevant Pages

  • Re: IPSec on webserver
    ... As long as server is not part of domain it won't be able to use Kerberos as ... Kerberos only works in domain. ... At the local office the intranet runs behind a public IP. ... everything is set to authenticate using kerbos. ...
    (microsoft.public.win2000.security)
  • Re: iis problems with some xp clients - kerberos issue?
    ... is the browser even attempting Kerberos Authentication? ... the webserver failing to get a service ticket for the SQL Server etc. ... Check that the site is in IE's Intranet zone (IE doesn't attempt to Kerberos ... Both access SQL ...
    (microsoft.public.inetserver.iis.security)
  • Re: iis problems with some xp clients - kerberos issue?
    ... they unfortunately end up with LARGE Kerberos ... which is where the Kerberos tickets are passed - and I don't know what your ... server is configured to. ... Both access SQL ...
    (microsoft.public.inetserver.iis.security)
  • Re: Kerberos Auth using O2k3 and E2k3 in a cluster
    ... >authenticate to our LCS and our DC using kerberos; it's just the Exchange ... They may ask the Exchange server for a GC name, ...
    (microsoft.public.outlook)
  • Re: Kerberos Auth using O2k3 and E2k3 in a cluster
    ... >authenticate to our LCS and our DC using kerberos; it's just the Exchange ... They may ask the Exchange server for a GC name, ...
    (microsoft.public.exchange.clients)