Reply to thread

Message: [QUOTE="Lewis Wang [MSFT], post: 4270728"] Thanks Stefan, Lior for the suggestions. Hi Arnold, It's a Double-Hop Issue. Please check the following links for more information: 264921 INFO: How IIS Authenticates Browser Clients [URL]http://support.microsoft.com/?id=264921[/URL] What is the Double-Hop Issue? [URL]http://support.microsoft.com/?id=329986#3[/URL] Here are two workarounds: Method A When the Web.config file is set to identity impersonate="true"/ and authentication mode="Windows", use the Anonymous account with the following settings: 1. On the ASPX page, set the security mechanism to Anonymous only. 2. Clear the Allow IIS to control the password check box. 3. Set the Anonymous account to be a domain user. Method B When Web.config and Machine.config are set as follows: 1. When Web.config is set to identity impersonate="false"/ and authentication mode="Windows" 2. When Machine.config is set to processModel username=Domain\username,password=secret 3. If identity impersonate="false"/ in the Web.config file, the credentials of the Base process are used. When you supply a domain user and password, you make it possible for IIS to pass a primary token to the SQL Server. Hope this helps. Best regards, Lewis This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | Content-Class: urn:content-classes:message | From: "Arnold" <acurry@softways.com> | Sender: "Arnold" <acurry@softways.com> | Subject: Integrated Security | Date: Thu, 11 Sep 2003 05:38:20 -0700 | Lines: 13 | Message-ID: <077e01c37861$9500bc00$a301280a@phx.gbl> | MIME-Version: 1.0 | Content-Type: text/plain; | charset="iso-8859-1" | Content-Transfer-Encoding: 7bit | X-Newsreader: Microsoft CDO for Windows 2000 | X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300 | Thread-Index: AcN4YZUA6DZINxL4SveACWHEjQ5NUw== | Newsgroups: microsoft.public.dotnet.framework.aspnet.security | Path: cpmsftngxa06.phx.gbl | Xref: cpmsftngxa06.phx.gbl microsoft.public.dotnet.framework.aspnet.security:6631 | NNTP-Posting-Host: TK2MSFTNGXA11 10.40.1.163 | X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security | | I'm trying to log on to SQL Server 2000 via an ASP.NET | page using SqlClient with integrated security. I get the | error message "invalid login NT_AUTHORITY/ANNONYMOUS". I | believe I have all the correct web.config settigs correct | because I can get the page to work as long as it is on the | same computer as the WebServer (thie sqlserver is on a | different machine). As soon as access the page from a | client (browser not on same machine as web server) I get | the message. I'd appreciate any ideas. | | TIA, | | Arnold | [/QUOTE]

Verification