Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase ««12

ASP.NET App and SQL Server identity Expand / Collapse
Author
Message
Posted Tuesday, October 09, 2012 4:36 PM


Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Today @ 2:26 AM
Points: 1,289, Visits: 3,859
opc.three (10/9/2012)
mister.magoo (10/9/2012)
Obviously, you must ensure the web site has only ASP.NET Impersonation and Windows Authentication enabled in the "Authentication" settings for this to work...

You do make it seem simple, but it appears there are two pieces of the puzzle not stated in your solution that allow your code to function in a distributed environment.

1. SPN for MSSQLSVC must exist under account running database service which allows the client's Kerberos ticket to make it to the database server intact
2. browser must be configured for "Integrated Windows Authentication" which allows the client credential to be passed to the web server through browser without asking the client to supply username/password


Thanks for adding those details - I sometimes forget because mostly I don't do web work and when I do it is usually not this way!
Edit: Strictly speaking, you don't have to have #2 though - but I would usually


MM




Post #1370620
« Prev Topic | Next Topic »

Add to briefcase ««12

Permissions Expand / Collapse