Two-hop issue

[AGB]

Hi all,

I have a two hop issue. I have two machines in the same domain--one
webserver and the other hosting SQL Server. I am using impersonation
and integrated windows authentication but for some reason the
connection is bailing to the database from the IIS machine. I can use
my localhost to connect to the remote database just fine.

There are tons of post to this issue but they don't seem pan out much
so I am curios if anyone has actually solved it. Here is the error:

Login failed for user '(null)'. Reason: Not associated with a trusted
SQL Server connection.

Again, I am using impersonation and my user account has a SQL Server
account with appropriate permissions.

Any help?

 

[Juan T. Llibre [MVP]]

1. Which OS's are you using on both boxes ?

2. Are you using "Trusted Connection =Yes" in your connection string ?

3. Set the SQL Server box to "Mixed Authentication", and try to connect.

4.
re:

I can use my localhost to connect to the remote database just fine.

Assuming that box is your test box, which account are you using
in it to connect to the SQL Server box. How are you authenticating
*that* account so that access is granted by the SQL Server box?




Juan T. Llibre
===========

 

[Scott Allen]

One way I've solved the issue is with Kerberos delegation:
http://support.microsoft.com/default.aspx?scid=kb;en-us;810572

 

[AGB]

1. Which OS's are you using on both boxes ?

Windows 2003

2. Are you using "Trusted Connection =Yes" in your connection string ?

Yes

3. Set the SQL Server box to "Mixed Authentication", and try to connect.


Assuming that box is your test box, which account are you using
in it to connect to the SQL Server box. How are you authenticating
*that* account so that access is granted by the SQL Server box?

I am using my NT login and I do have an account in SQL Server. It just
looks like my account doesn't propogate all the way to NT. Something
on the Webserver is dropping my credentials and SQL Server is using a
NULL session.