RE: Which account on SQL 2005 web sync via https

Well - to take a stab in the dark on this one, it seems the account you are
using to invoke replisapi.dll does not have with sufficient privileges.

Be sure to use only basic authentication, and ensure that the login you're
using has
permission to access the UNC file share you are using to expose your snapshot.

In my experience, the Replicator Authentication Group only has sufficient
permissions when you are running in a domain environment.

Although its very bad security practice in your case, circa the manual, we
used an Administrators Group member over a secure connection.

"gstar" wrote:

Hi, environment is SQL2005 [wkg_sql] non domain & IIS6 [wkg_iis] non
domain.

My steps are same as the steps in the following three articles:
How to: Configure a Publication to Allow for Web Synchronization (SQL
Server Management Studio)
http://technet.microsoft.com/en-us/library/ms345211(SQL.90).aspx

How to: Configure IIS for Web Synchronization
http://technet.microsoft.com/en-us/library/ms152511(SQL.90).aspx

How to: Configure a Subscription to Use Web Synchronization (SQL
Server
Management Studio)
http://technet.microsoft.com/en-us/library/ms345214(SQL.90).aspx

I have now completed this well over 15 times but still have no success
in configuring this in a non domain environment. After the setup I can
connect from a client using https://iis_server/sqlreplication/replisapi.dll?
after logging in but cannot access the diag section, its states access
denied.

I feel the problem lies in the wizard, it asks that you give the sql
repli folder read priveledges to the IIS account. In a non domain
environment that would be impossible as you cannot browse to the IIS
server??

Anyone know what account IIS can access the sql snapshot directory on?

Desperate!


.

Relevant Pages

  • Re: IIS 6.0 and SQL server
    ... domain account, or it needs to be a local account on both machines with ... should be true both if you are using Windows authentication in SQL, ... if you are using SQL authentication in SQL but the SQL client on the IIS ...
    (microsoft.public.inetserver.iis.security)
  • Re: Connecting to SQL through ASP
    ... > I think i have followed the instructions for connecting to SQL Server ... > Created local account with same name as IIS ...
    (microsoft.public.inetserver.iis.security)
  • Connecting to SQL through ASP
    ... I think i have followed the instructions for connecting to SQL Server ... IIS 5.0 machine running on win2000 pro ... Created local account with same name as IIS ...
    (microsoft.public.inetserver.iis.security)
  • Re: kerberos the story so far
    ... I have put the IIS machine into a local group and assigned it owner in the ... One the I have noticed is that running the AuthDiag tool on the SQL box says ... where my IIS front end server could not obtain a kerberos ... > It looks like you registered the SPN for the SQL service user account. ...
    (microsoft.public.win2000.active_directory)
  • Re: IIS & SQL, dedicated user account & GPO
    ... I am setting up a dedicated IIS server for hosting a site that will use data from a SQL DB on the SBS server. ... a dedicated domain user account is the securest way to allow IIS to access SQL without a lot of maintenance. ...
    (microsoft.public.windows.server.sbs)