In SQL 2000, security login inquiry

  • escobal_lor

    SSC Enthusiast

    Points: 131

    We used the trace file and saw an “SA” ID login in SQL2K was failed and the hostname is blank. Is it possible that the “SA” ID in SQL 2000 was able to login and you cannot capture the HostName?

  • Lowell

    SSC Guru

    Points: 323316

    if an application explicitly codes the “Workstation Id = ” section to a connection string, then you can blank or or spoof the values you might expect:

    here’s a connection string example,and here’s how to do it in SSMS:

    Dim mySqlConnectionFormat As String = “data source={0};initial catalog={1};user id={2};password={3};Trusted_Connection=False;Connect Timeout=600;Workstation ID=FAKEMACHINE;Application Name=GhostInTheMachine;”

    Lowell


    --help us help you! If you post a question, make sure you include a CREATE TABLE... statement and INSERT INTO... statement into that table to give the volunteers here representative data. with your description of the problem, we can provide a tested, verifiable solution to your question! asking the question the right way gets you a tested answer the fastest way possible!

  • escobal_lor

    SSC Enthusiast

    Points: 131

    thanks Lowell.

    I may need a sample script to automatically know an attemp to use “SA” ID login in SQL2K was failed. I need to capture the HostName used.

Viewing 3 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply