Post reply

In SQL 2000, security login inquiry

  • April 15, 2011 at 3:19 am

    #249456

    We used the trace file and saw an "SA" ID login in SQL2K was failed and the hostname is blank. Is it possible that the "SA" ID in SQL 2000 was able to login and you cannot capture the HostName?

  • April 15, 2011 at 6:17 am

    #1312065

    if an application explicitly codes the "Workstation Id = " section to a connection string, then you can blank or or spoof the values you might expect:

    here's a connection string example,and here's how to do it in SSMS:

    Dim mySqlConnectionFormat As String = "data source={0};initial catalog={1};user id={2};password={3};Trusted_Connection=False;Connect Timeout=600;Workstation ID=FAKEMACHINE;Application Name=GhostInTheMachine;"

    Lowell

    --help us help you! If you post a question, make sure you include a CREATE TABLE... statement and INSERT INTO... statement into that table to give the volunteers here representative data. with your description of the problem, we can provide a tested, verifiable solution to your question! asking the question the right way gets you a tested answer the fastest way possible!

  • April 18, 2011 at 11:33 pm

    #1313174

    thanks Lowell.

    I may need a sample script to automatically know an attemp to use "SA" ID login in SQL2K was failed. I need to capture the HostName used.

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply