Re: How to setup IAS SQL Logging with Windows Authentication ?

From: Bill Dollar [MSFT] (willdo_at_online.microsoft.com)
Date: 02/24/04

  • Next message: Roger: "Re: IAS Security" 
    Date: Tue, 24 Feb 2004 10:22:42 -0800

    Windows authentication will not work with SQL logging like this. The reason
    is because IAS will use the local system account to connect to the remote
    SQL server. The easiest way to make this work is to use SQL credentials.

    Is this not permissable on your network? 

    -- 
This posting is provided "AS IS" with no warranties, and confers no rights.
"Didier Devroye" <thiachugt@jetable.com> wrote in message
news:fc89c557.0402230324.43967142@posting.google.com...
> Hello,
>
> I use Windows 2003 IAS Service and I need to save my accounting record
> on an MSSQL Server 2000 database. I have successfully setup SQL Loggin
> with SQL authentication in my test lab but I need to use Windows
> authentication on my production server.
>
> When I use the Windows authentication I had the following error on my
> SQL Server logs:
>
> "Login failed for user '(null)'. Reason: Not associated with a trusted
> SQL Server connection."
>
> I have tried to change the IAS Service account but then I had this
> error on the IAS host:
>
> "The Internet Authentication Service service failed to start due to
> the following error:
> The account specified for this service is different from the account
> specified for other services running in the same process."
>
> Someone can help me? I cannot change the setup of my production
> database due to our security policy.
>
> Thanks.
  • Next message: Roger: "Re: IAS Security"

    Relevant Pages

    • Re: IAS Athentication via ODBC
      ... IAS is compatible with any LDAP- ... authentication extension DLL that handles the authentication process. ... RADIUS extension DLL. ... account on your IAS server; configuring a connection request policy on your ...
      (microsoft.public.internet.radius)
    • Re: Distributed Query - Linked Servers?
      ... In the case of SQL style accounts, it doesn't seem very secure to me, because the password will be transmitted over the network. ... it should also be able to work by setting up a credential and proxy account on Server1. ... In this case it could work with NTLM authentication. ... we just need to verify that the 2 sql server instances are under sql server and windows authentication mode and the sql account you use has the permission on the 2 sql server instances. ...
      (microsoft.public.sqlserver.server)
    • Re: Authentication forwarding to Active Directory
      ... In order for IAS to query its "local SAM database" instead of AD, ... be installed on a server which is not a member server in Active Directory. ... > but the IAS will also look for the computer account cause we are doing ... > a computer authentication and not a user authentication. ...
      (microsoft.public.internet.radius)
    • RE: Integrated Authentication (Kerberos) Problem
      ... Verify the SPN for the SQL service account is registered such as the ... >Thread-Topic: Integrated Authentication Problem ... A Windows XP SP1 with IE6 client machine ...
      (microsoft.public.inetserver.iis.security)
    • Re: Utter madness!
      ... If it's going to be "tricky" to get a trusted connection to my SQL box ... certain authentication scenarios are harder in that set ... To do the service account approach, ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Quantcast