Re: Identity OR Firewall???

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Darren Green (darren.green_at_reply-to-newsgroup-sqldts.com)
Date: 12/16/04 

Date: Thu, 16 Dec 2004 15:12:33 -0000

This is probably the firewall. If you don't allow certain ports between
servers and DCs, and servers and servers then you cannot use Windows Auth or
even maintain a domain. I have seen this exact error recently with a new
deployment, when the firewalls where locked down too far, although its
always a good base line to start from. Talk to your security people, that's
what I did. 

-- 
Darren Green
http://www.sqldts.com
"Sandeep" <m_sandeep78@indiatimes.com> wrote in message
news:%23Yw0b$o4EHA.2788@TK2MSFTNGP15.phx.gbl...
> All,
>     First let me explain My Application's deployment scenerio.
>     My Application server is on win2003 + IIS6.0.
>     I created a local user called XYZ on the server. My web application's
> pool run under this user's identity.
>     The DB machine (SQL Server 2000)on which the DTS is present is having
> the same local account with the same credentials.
>     In my code i am loading a DTS package by calling function
> LoadFromSQLServer. I am using trusted connection as one of the parameters.
>     When this line of code is executed i get the following error
>     "System.Runtime.InteropServices.COMException: Cannot generate SSPI
> context"
>     My App server and DB server are separeted by a firewall.
>
>     I dont get any error if my App server and DB Server are in the same
> domain ( witout firewall).
>     Can anybody help me out??
>
>
> Thanx in advance
>
>

Relevant Pages

  • Re: CEICW fails at firewall config
    ... Do you or do you not have ISA 2000 or ISA 2004 installed on the SBS server? ... Do you have 2 NICs in the SBS? ... CEICW fails on firewall configuration every time. ... >>> Call to Creating the protected networks access rule returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: Recycler security issues on IIS server
    ... > latest upates to the server. ... > like to see the server put behind our firewall, ... other software, install all patches, IISlockdown, URLscan, use the correct ... the procedures you follow may vary depending on your security needs. ...
    (microsoft.public.inetserver.iis.security)
  • Re: ISA SERVER NOT STARTING
    ... I delete the nat/basic firewall and stop and started the RRAS an tried to ... There were no critical events in the DNS Server Log in the last 24 hours. ... An error occurred during logon ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: For Microsoft Partners and Customers Who Cant Download or Access
    ... to reconfigure the firewall, but to use a static IP on your client ... and to make sure that the DNS server entries on the client are ... Microsoft for msdn2.microsoft.com. ... use a static IP and set the DNS server addresses to the DNS ...
    (microsoft.public.dotnet.general)
  • RE: Is this as bad as it seems?
    ... The network being protected by the router or firewall is still vulnerable to ... > circumvented - the administrator has explicitly allowed HTTP traffic on ... this exploit has the effect of allowing the attacker to send *INBOUND* HTTP ... The HTTP server (located on the internal network or anywhere else that is ...
    (Security-Basics)