SQL Security on a non-domain network

  • OK, I have found everything I can find on SQL Server security but can still find no info on how to configure security so that a database can be accessed across a network. I keep running in to login failures and other problems. This becomes even more problematic when the AspNetDb.mdf database gets involved when using Web Developer 2005.

    Can someone please help me understand how to configure a database for access across a peer-to-peer network? I am running SQL Server 2005 Express on a Windows XP Pro machine. I have a couple of laptop computers in the same workgroup that need access to the database.

    I have used sp_grantlogin to a local group called DbUsers and added the member IUSR_WILLIAM (I have tried many of the accounts on the machine, but to no avail). I have also used the following command to grant permissions to the database in question:

    GRANT SELECT, INSERT, UPDATE TO ALL

    I am able to access the db from code while in the WebDev platform but as soon as I try to access the db from IE, using the address:

    http://WILLIAM/WebSiteName/default.aspx

    I get a login failure.

    What am I missing?

  •  

    paste the exact error you are getting; there's way to many possibilities to diagnose it at this point;

    there's a huge difference between connecting directly from a laptop to your SQL server instance on \\william, and connecting to a web page that is hosted by the IIS Service on \\william. the web site will connect to your db with the credentials you most like put in your web.config, but there's way to many variables to even bet that that is the issue.

    an asp/aspx webpage on IIS will most likely connect to localhost with a username and password you created in SQL server; you'd also need to make sure you enabled mixed mode authentication, otherwise you are locked into using local user credentials like william\administrator. laptop\administrator wouldn't be able to connect, for example.

    from a laptop on your workgroup, can you connect to WILLIAM with sa? another user you created?

    Lowell


    --help us help you! If you post a question, make sure you include a CREATE TABLE... statement and INSERT INTO... statement into that table to give the volunteers here representative data. with your description of the problem, we can provide a tested, verifiable solution to your question! asking the question the right way gets you a tested answer the fastest way possible!

Viewing 2 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply