classic IE -> IIS -> SQL Double hop issue - Help needed resolving

[Guest]

Its the classic scenario. We want our users to connect from their desktop to
the web server and on to the database server using integrated windows
authentication. It just wont work, even after I think I've done everything
I'm supposed to for enabling delegation.

IE is set to allow integrated authentication.
ASPNET on the web server has permission to act as part of the operating
system.
web.config impersonate is set to true
Active Directory is set up with the web server to allow it to delegate
IIS on the web server runs as localsystem
sql connection is set to use trusted connection
SQL Server has connection permissions for the user in question

Locally its all good, but going against our dev web server from my pc to the
dev sql server, tis the dreaded "Login failed for user '(null)'."

Can someone please point me in the right direction as to what I'm missing?
We're under a real time crunch here.

Thank you in advance!!


-=--==---===----====-----====----===---==--=-
Chuck "Greebo" Haeberle, MCSD, MCSD.NET
Software Consortium, Inc.
Towson, Maryland

 

[George]

Did you disable anonymous access in the IIS management console to that application?

George
Its the classic scenario. We want our users to connect from their desktop to
the web server and on to the database server using integrated windows
authentication. It just wont work, even after I think I've done everything
I'm supposed to for enabling delegation.

IE is set to allow integrated authentication.
ASPNET on the web server has permission to act as part of the operating
system.
web.config impersonate is set to true
Active Directory is set up with the web server to allow it to delegate
IIS on the web server runs as localsystem
sql connection is set to use trusted connection
SQL Server has connection permissions for the user in question

Locally its all good, but going against our dev web server from my pc to the
dev sql server, tis the dreaded "Login failed for user '(null)'."

Can someone please point me in the right direction as to what I'm missing?
We're under a real time crunch here.

Thank you in advance!!


-=--==---===----====-----====----===---==--=-
Chuck "Greebo" Haeberle, MCSD, MCSD.NET
Software Consortium, Inc.
Towson, Maryland

 

[Bruce Barker]

in short you need to switch from ntlm to kerberos, to do this.

http://support.microsoft.com/default.aspx?scid=kb;en-us;810572

-- bruce (sqlwork.com)