double hop issue? Not sure anymore

[reezaali]

Hi all

I have an issue which goes something like this

I have a web app that accesses a SQL Sever. I use AD for my users. In
SQL i have assigned my users to various roles etc....not SQL users but
AD users.

my web app uses identity impersonation = true and i have disabled
anonymous access in IIS

I have a development environment with XP, IIS5 and ver 1.1 of
framework. The web app works fine and shows my results.


I have a win2k server with IIS 5 on it and when i deploy my app to this
machine, which is part of the domain and IIS is configured the same
way, I get what seems to be the double hop issue. So i have ensured
that the anonymous access is diabled in IIS and integrated security is
turned on. the machine is part of the domain. I have installed the sql
client tools on the web server....no matter what i do i cannot access
SQL server...it keeps giving me the Login failed for user 'NT
AUTHORITY\ANONYMOUS LOGON'. error. I checked the user name of the
person accessing the page by using
System.Security.Principal.WindowsIdentity.GetCurrent().Name and the
username is being written out however when this information passes to
SQL i still get the anonymous user error...

Can you please help me with this issue? I am really at a loss here...

Thank you.
Reeza

 

[Dominick Baier [DevelopMentor]]

Hi,

there are some more things to take into consideration - i guess you only
tested locally on your WinXP machine - this is technically not delegation
- thats why it probably worked...

read more here:
http://msdn.microsoft.com/msdnmag/issues/05/09/SecurityBriefs/default.aspx

 

[reezaali]

Thank you Dominick.....excellent article....the delegation solved our
problem....