Integrated Security (SSID?) in a no-domain environment

  • Howdy all,

    I have a Windows environment wherein there is no domain.

    We're all in the same 'Workgroup'.

    Server A has IIS and uses SQL Login (username/password) to connect to Server B which as SQL Server 2005.

    Is it possible to use Integrated Security (SSID?) from Server A (IIS) to log into Server B SQL Server? If so, how?

    TIA,

    GaryN

  • Gary Noter (6/1/2011)


    Howdy all,

    I have a Windows environment wherein there is no domain.

    We're all in the same 'Workgroup'.

    Server A has IIS and uses SQL Login (username/password) to connect to Server B which as SQL Server 2005.

    Is it possible to use Integrated Security (SSID?) from Server A (IIS) to log into Server B SQL Server? If so, how?

    TIA,

    GaryN

    It is possible, but there is additional admin overhead.

    You'll need to create two local windows logins, one each on Server A and Server B. Both logins must have the same username and password.

    When the IIS server authenticates to the database server it will rely on NTLM (less secure than Kerberos provided by Active Directory domains) and will result in a successful "pass-through authentication". The additional admin overhead I mentioned comes in when you want to reset the password because you'll need to coordinate it across both servers.

    There are no special teachers of virtue, because virtue is taught by the whole community.
    --Plato

  • Thx for the info.

    I actually figured out a better solution.

    I created a (dotNET) webservice on Server B (SQL) that accepts the needed (record) info and then logs into the local SQL using, of course, the local SSID.

  • Excellent! Thanks for posting back.

    There are no special teachers of virtue, because virtue is taught by the whole community.
    --Plato

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply