Re: DIFFICULT PROBLEM! SSL for SQL 2000 Server. MS Fix bulletin does not help at all.

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: aaron kempf (aaron_kempf_at_hotmail.com)
Date: 11/24/04 

Date: Tue, 23 Nov 2004 17:37:40 -0800

If I were you, i would post in a different newsgroup

I think that you can just force protocol encryption, im not sure that you
need SSL, per se

What are you trying to accomplish?

"Jason Robertson" <jason6869@msn.com> wrote in message
news:QYidnaAH2unVYhzcRVn-gQ@comcast.com...
> Hi,
>
> I have set up an Active Directory, Certificate Services on Windows 2003
> Server. I am running SQL 2000 Server. AD and Certificate Services were
> installed correctly.
>
> My goal is to be able to use SSL when connecting to SQL Server via Query
> Analyzer. I also want to keep the SQL Server installation under a "Domain
> User" account with as little privileges as possible.
>
> My problem is that SQL Server will not start when "Domain User" is only a
> "member of" "Users" group. It starts when I make "Domain User" a "member
of"
> "Administrators". It seems that the SSL "forced encryption" will only work
> with "Administrator" privileges which is the total access to control the
> server, and this is not safe.
>
> Does it mean that SSL "forced encryption" will only work under a "Domain
> User" that is a "member" of "Administrators"? Is there another "Group"
with
> limited privileges that I could assign the "Domain User" to?
>
> How else could I have the SSL work and SQL server installation in a
"Domain
> User" account?
>
> I have tried so many different things. Wasted one week already. Nothing
> works. There was some MS bug bulletin saying that this problem was fixed
> with SQL 2000 service pack 2. I have service pack 3a installed. It still
> does not work. The log shows the same errors as on the MS fix buletin that
> was supposed to be fixed by that sevice pack. I've tried with Windows 2003
> Srv, Win 2000 Srv. SQL Standard, Enterprise. I just cant get it to run.
Can
> you offer some more specific clues? It is so depressing and dissapointing.
> Here is the MS buletin that I mentioned:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;314636
>
> Thank you for your help.
>
>

Relevant Pages

  • RE: How to enable 2-way SSL encryption
    ... This digital signature takes the form of a certificate ... SQL server 2000 implements SSL. ... Enable SSL Encryption for SQL Server 2000 with Certificate Server ...
    (microsoft.public.sqlserver.server)
  • Re: JDBC - MSQL 2K5/MS SQL 2005 SSL ISSUE
    ... however I am trying to configure SSL on SQL Server ... Encrypted Connection" option in SQL Server 2000 network utility is enabled, ... Java Program if it is running in SSL mode or not? ...
    (microsoft.public.sqlserver.security)
  • How to install SQL server securing it with SSL communications. For Server 2000 or Server 2003. Issue
    ... segment as the webserver or SQL server with windows patches. ... Most early invented NIDS do NOT understand SSL or IPv6 traffic because they ... administrators group during the installation or after. ... Use the HTML web page on the certificate server. ...
    (microsoft.public.sqlserver.security)
  • Re: User ASPNET in SQL Server 2000
    ... Without SSL this implementation would be a security nightmare, with SSL it would be dragging feet. ... > Make sure that the connection properties for your SQL connection (e.g., ... >> I think that if you need to use integrated autentication on the SQL server ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: DIFFICULT PROBLEM! SSL for SQL 2000 Server. MS Fix bulletin does not help at all.
    ... repeatedly posting here, I suggest you contact PSS for immediate assistance. ... > My goal is to be able to use SSL when connecting to SQL Server via Query ... I also want to keep the SQL Server installation under a "Domain ... > Srv, Win 2000 Srv. ...
    (microsoft.public.sqlserver.fulltext)