Re: using windows authentication...
From: AnthonyThomas (Anthony.Thomas_at_CommerceBank.com)
Date: 12/27/04
- Next message: John Bell: "Re: SQL Server Agent hangs and becomes unresponsive"
- Previous message: AnthonyThomas: "Re: high networkio in waitstats"
- In reply to: Hassan: "using windows authentication..."
- Messages sorted by: [ date ] [ thread ]
Date: Sun, 26 Dec 2004 23:08:34 -0600
First, let's get something straight: SQL Server DOES NOT TALK TO WEB
SERVERS. Web clients request access and data from database servers,
directly or indirectly, and the DBMS' respond to those requests. SQL Server
or any other DBMS works the same way.
That being said, the communication is inbound; so, it needs to be taken very
seriously so it is configured and secured correctly. I will tell you,
however, that Integrated Security is...a hundred times better than SQL
Server security. Not just because of the encryption algorythms or Group
Policies, although those increase the security, it has more to do with how
developers deal with security under the two contexts.
Integrated Security requires thought and architectural planning to even get
it to function. SQL Server security is easy; so easy, it lulls you into a
false sense of security. This more than anything else--sloppiness--is why
making the switch increases the security of the system.
Check out the Microsoft Systems Architecture: Internet Data Center white
papers. This is the most comprehensive text I've seen for the overall, as
well as detailed level, design of a distributed architecture.
http://www.microsoft.com/resources/documentation/msa/idc/all/solution/en-us/default.mspx
Hope this helps.
Sincerely,
Anthony Thomas
-- "Hassan" <fatima_ja@hotmail.com> wrote in message news:u6$n9NK6EHA.3700@tk2msftngp13.phx.gbl... Our Web servers are exposed to the internet and our SQL Server talks to the Web Servers. If we do implement Windows authentication mode for the SQL, how do we setup the client connection from the Web Servers ? I mean we have different content by different teams on the same Web Servers. How can we handle security from a Windows authentication ? I mean do the Web Servers need to be logged on with a particular account that has access to SQL. Please advise. Thanks
- Next message: John Bell: "Re: SQL Server Agent hangs and becomes unresponsive"
- Previous message: AnthonyThomas: "Re: high networkio in waitstats"
- In reply to: Hassan: "using windows authentication..."
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
