Hi, I need to know whether it is possible to use integrated security to connect to an instance of sqlserver that exists on a separate server to IIS. I need the connection to impersonate the current user. This is for an intranet on a secured network.
I have IIS6 on windows2003 server and SQLServer2000 on windows2000 server.
Here's what I know so far:
1) I can successfully achieve this when the sql server is on the same box as IIS.
2) If I use the same code to connect to an instance of sql server on a different box the connection tries to use the 'NT AUTHORITY\ANONYMOUS LOGON' account. There one peculiarity with this: if I run the web site from the web (IIS) server then it WILL impersonate my account when connecting.
3) I have read that using TCP/IP instead of pipes may enable this to work. I have no understanding of what this really means.
4) Most of the sites I have looked at do not say that it is impossible to achieve this. In general they say it is easy when sql server is on the same box (which I agree with) and just that if SQL Server is on another box it is "more difficult".
If you know this is possible and can tell me how I can achieve this then I will double the point allocated. However if the answer is just that it isn't possible then that will be great (it will put me out of my misery)
Code details:
my connection string: "Integrated Security=SSPI;Data Source=testbox;Initial Catalog=test;
web.config setting:
<identity impersonate="true"/>
<authentication mode="Windows"/>
Start Free Trial