Windows Authentication with ASP.Net and SQL Server

[Siobhan]

Hi - I am trying to set up Windows Authentication for an application to pass
through credentials to SQL Server but I have done everything that most
documentation seems to say to do but keep getting The request failed with
HTTP Status 401: Access Denied !!
My set up is as follows:
Development PC running Win XP, IIS and VS2003
IIS Settings: Anon access is unchecked, Basic and Digest Auth are unchecked,
Integrated Windows Authentication is checked
Web.Config has the following lines:
<identity impersonate="true"/>
<authentication mode="Windows" />
SQL Server connect string:
"Data Source=ServerName;Initial Catalog=DBName;Integrated
Security=SSPI;persist security info=False;Trusted_Connection=Yes"


SQL Server is SQL Server 2000 and running on Win 2000 server remotely

User setup in SQL Server (my network account which I am logged in as) has
access to the db in question, SQL Server configure for mode mode
authentication

Is there anything else I need to do?

Much thanks in advance!

 

[Dominick Baier [DevelopMentor]]

Hello Siobhan,

that's a typical double hop problem. you have to enable delegation for the
web server in active directory.

read more here: http://msdn.microsoft.com/msdnmag/issues/05/09/SecurityBriefs/default.aspx

 

[Patrick.O.Ige]

Or Siobhan you could hard code your username and passowrd like
<identity impersonate="true" username="" passowrd="" />
But i guess its not the best way to do it..
Patrick