iis security: I have read about 10,000 posts on this topic but still can't get it to work
:(
We are designing a web app under ASP.NET VB that connects to a SQL database.
It needs to connect as the AD user currently using the browser (ie windows
authentication), because we already have all the security setup correctly in
SQL and many of views use the currently connected user to detirmine what to
return.

Setup
Web server: Windows 2003 + IIS6 + ASP.NET + Windows Authentication
web.config contains <identity impersonate="true" />
Trusted for delegation under AD

SQL Server: Windows 2003 + SQL 2000 + SQL and Windows Authentication

We have created a test aspx page that simply displays the name of the
impersonated user and it correctly returns:

domain\user

which changes dependant on who is accessing the browser, exactly as you
would expect.

The problkem occurs when we then try to connect to a SQL database using a
trusted authentication connection string.
The page fails indicating that it cant connect to the SQL DB as user null.
In other words the IIS process has NOT used the user authenticaitonj info to
connect to SQL.

Why not?
I have been working on this for days and run into a brick wall. I thought
once the IIS process was sicessfully impersonating domain\user it would use
those credentials for the SQL connect. Why doesnt it do this?
Al Blake, Canberra, Australia

More info:
Here's the connection string that we are using to try to connect through to
the SQL db:

Provider=SQLOLEDB.1;Integrated Security=SSPI;Persist Security
Info=False;User ID=sa;Initial Catalog=Media;Data Source=MIDAS

Update:
I've fixed it!

Here's the connect string that works:

Provider=SQLOLEDB.1;Integrated Security=SSPI;Persist Security
Info=False;User ID=;Initial Catalog=Media;Data Source=MIDAS

I now have the browser user passing through the ASP and being used to
connect to SQL.
neat.
Al.

Hi,

could you send more information on how you resolve your problem? I want
to do the same operation but I don't have a clear idea on how to do.

Specialy you tell about inpersonate what means is neccesary?

Thank a lot for your support.
Bye Dario



*** Sent via Devdex http://www.devdex.com ***