Pass Integrated Windows credentials to SQL Server w/out Basic Authentication?

Posted on 2005-05-02
Medium Priority
Last Modified: 2012-06-27
Using ASP legacy (not .NET), IIS 6 on Win 2003, SQL is on a different server.

When I turn on Basic Authentication for the site, and enter my Windows Active Directory  user credentials, the database connection works.  When I turn on Integrated Windows Authentication (even leaving Basic enabled), it tries to use NT AUTHORITY\ANONYMOUS LOGON and fails.

Is there anyway around this?  I want it to just work, without having to type in credentials for the user account I'm already logged in as.

My connection string is:
"Provider=SQLOLEDB;Data Source=<server>;Initial Catalog=<database>;Integrated Security=SSPI"

Question by:bohiti
  • 2
  • 2

Author Comment

ID: 13913167
Figuring out how I wanted to phrase this question helped me refine my Google searches.  I found the following link:

If you use SQL Server's Integrated or Mixed security features, and the SQL Server database resides on a remote server, you will not be able to use integrated Windows authentication. Specifically, you cannot forward integrated Windows authentication credentials to the remote computer. This means that you may have to use Basic authentication, which relies on the user to provide user name and password information.

...Pretty much answers my question.  If anyone has a workaround, I'd love to hear it!
LVL 15

Expert Comment

ID: 13916014
Yes, this is the dreaded double hop limitation of Integrated Authentication.

As far as I know there are no workarounds for SQL Server. The simplest solution is to have IIS and SQL Server running on the same box. Or re-write your app in ASP.NET...

There ARE workarounds for connecting to Exchange (for example) but they're definitely what I'd call hacks.

Here are two more articles from MSDN that explains things further:



Bottom line is that (as far as I know) you're out of luck :-(

Author Comment

ID: 13917824
Thanks deighc.
I'd like to delete the question if no one objects.
LVL 15

Expert Comment

ID: 13917838
No objections from me.

Accepted Solution

Lunchy earned 0 total points
ID: 14148807
Closed, 125 points refunded.
Friendly Neighbourhood Community Support Admin

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I recently decide that I needed a way to make my pages scream on the net.   While searching around how I can accomplish this I stumbled across a great article that stated "minimize the server requests." I got to thinking, hey, I use more than one…
This demonstration started out as a follow up to some recently posted questions on the subject of logging in: http://www.experts-exchange.com/Programming/Languages/Scripting/JavaScript/Q_28634665.html and http://www.experts-exchange.com/Programming/…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…
Suggested Courses
Course of the Month13 days, 18 hours left to enroll

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question