Can i access SQL Login Users in ASP.Net application

Hello All,

I have SQL Server 2005 Installed and i have numbers of SQL Logins users which i want to use in my ASP.Net Application for authentication.

I am using ASP.Net 2.0 (VS.Net 2005).

Can i use the SQL Logins for ASP.Net web application authentication like the way we use Active Directory users?
Thanks in advance,
Wajahat Abbas
http://www.wajahatabbas.com

SQL Authentication is specific to SQL. You will not be able to use SQL Logins as you use Windows users.

See also:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cpconaspnetauthentication.asp

Thanks
Laurentiu

|||

Thanks for replying.

Ya, i was thinking that with SQL 2005 and ASP.Net release, MS will increase the ASP.Net authenticaiton modes.

As SQL Server 2005 provides very cool features for SQL Users (like bad password, rating), so once we able to consume those things in ASP.Net it would be a peice of cake.
Anyway may be in next releases.

Thanks & Regards,
Wajahat Abbas
http://www.wajahatabbas.com
http://www.dotnetpakistan.com

Can i access SQL Login Users in ASP.Net application

Hello All,

I have SQL Server 2005 Installed and i have numbers of SQL Logins users which i want to use in my ASP.Net Application for authentication.

I am using ASP.Net 2.0 (VS.Net 2005).

Can i use the SQL Logins for ASP.Net web application authentication like the way we use Active Directory users?
Thanks in advance,
Wajahat Abbas
http://www.wajahatabbas.com

SQL Authentication is specific to SQL. You will not be able to use SQL Logins as you use Windows users.

See also:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cpconaspnetauthentication.asp

Thanks
Laurentiu

|||

Thanks for replying.

Ya, i was thinking that with SQL 2005 and ASP.Net release, MS will increase the ASP.Net authenticaiton modes.

As SQL Server 2005 provides very cool features for SQL Users (like bad password, rating), so once we able to consume those things in ASP.Net it would be a peice of cake.
Anyway may be in next releases.

Thanks & Regards,
Wajahat Abbas
http://www.wajahatabbas.com
http://www.dotnetpakistan.com

Can Developer and Evaluation Editions do web farms with custom authentication?

I am using the Report Manager in a web farm configuration with custom
authentication. It seems that neither the Developer nor the Evaluation
editions can work in this configuration, even though the descriptions for
these editions say that they're as capable as the Enterprise Edition (only
the licensing differs). The problem seems to be that the cookie generated by
the Report Server web service, when passed back from the browser, is being
rejected by the Report Manager. In a web farm, the domain name used to
access the Report Manager is different from that used by Report Manager to
access the Report Server web service. They can not be the same, and I think
because of this the cookie generated by Report Server is being rejected by
Report Manager.
I have tried SP1 and used the PassThroughCookie setting, but it still
doesn't work. Do I need to get the Enterprise Edition now when I am just in
development stage of this project?
Thanks.Dev and Eval should work with custom authentication as well as the
Enterprise SKU. I am not sure why the domain name for the cookie generated
by RS should be different than the domain report manager is in. BTW, you can
configure the RS cookie by changing settings in the <forms> tag in
Reportserver\web.config.
--
Tudor Trufinescu
Dev Lead
Sql Server Reporting Services
This posting is provided "AS IS" with no warranties, and confers no rights.
"Carlos C Tapang" <ctapang@.centerus.com> wrote in message
news:O$4fD4plEHA.2884@.TK2MSFTNGP09.phx.gbl...
> I am using the Report Manager in a web farm configuration with custom
> authentication. It seems that neither the Developer nor the Evaluation
> editions can work in this configuration, even though the descriptions for
> these editions say that they're as capable as the Enterprise Edition (only
> the licensing differs). The problem seems to be that the cookie generated
by
> the Report Server web service, when passed back from the browser, is being
> rejected by the Report Manager. In a web farm, the domain name used to
> access the Report Manager is different from that used by Report Manager to
> access the Report Server web service. They can not be the same, and I
think
> because of this the cookie generated by Report Server is being rejected by
> Report Manager.
> I have tried SP1 and used the PassThroughCookie setting, but it still
> doesn't work. Do I need to get the Enterprise Edition now when I am just
in
> development stage of this project?
> Thanks.
>|||Thank you for your response, Tudor. In the web farm I am working on, there
is a load balancer to which all requests go (one IP address, one domain
name). The load balancer then directs the request to a single web server in
the farm. Now, each web server has to have its own IP address, and this is
the IP address used by Report Manager to do a web service call to Report
Server. This internal IP address is different from the external IP address
made visible to the outside world by the load balancer. My suspicion is that
since the cookie was generated by the Report Server web service with the
internal IP address (which, by the way is also the RootServerUrl for the
service), when this same cookie is sent back from the browser, Report
Manager rejects it because now the browser is using the outside domain name
which is different from the internal IP address from which the cookie was
generated.
Is there an attribute within the <forms> element that can fix this problem?
I've looked and I have not seen any. How about <machineKey>, how can that
help me? Thanks very much again.
--Carlos
"Tudor Trufinescu (MSFT)" <tudortr@.ms.com> wrote in message
news:OwWho7rlEHA.896@.TK2MSFTNGP12.phx.gbl...
> Dev and Eval should work with custom authentication as well as the
> Enterprise SKU. I am not sure why the domain name for the cookie generated
> by RS should be different than the domain report manager is in. BTW, you
can
> configure the RS cookie by changing settings in the <forms> tag in
> Reportserver\web.config.
> --
> Tudor Trufinescu
> Dev Lead
> Sql Server Reporting Services
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> "Carlos C Tapang" <ctapang@.centerus.com> wrote in message
> news:O$4fD4plEHA.2884@.TK2MSFTNGP09.phx.gbl...
> > I am using the Report Manager in a web farm configuration with custom
> > authentication. It seems that neither the Developer nor the Evaluation
> > editions can work in this configuration, even though the descriptions
for
> > these editions say that they're as capable as the Enterprise Edition
(only
> > the licensing differs). The problem seems to be that the cookie
generated
> by
> > the Report Server web service, when passed back from the browser, is
being
> > rejected by the Report Manager. In a web farm, the domain name used to
> > access the Report Manager is different from that used by Report Manager
to
> > access the Report Server web service. They can not be the same, and I
> think
> > because of this the cookie generated by Report Server is being rejected
by
> > Report Manager.
> >
> > I have tried SP1 and used the PassThroughCookie setting, but it still
> > doesn't work. Do I need to get the Enterprise Edition now when I am just
> in
> > development stage of this project?
> >
> > Thanks.
> >
> >
>|||I think you could use your internal name for the RM SOAP Url. You could then
set up the ReportSeverExternalURL, which is what your clients will see:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/rsadmin/htm/drp_deploying_v1_0h9e.asp
Tudor Trufinescu
Dev Lead
Sql Server Reporting Services
This posting is provided "AS IS" with no warranties, and confers no rights.
"Carlos C Tapang" <ctapang@.centerus.com> wrote in message
news:u83lLZslEHA.3608@.TK2MSFTNGP09.phx.gbl...
> Thank you for your response, Tudor. In the web farm I am working on, there
> is a load balancer to which all requests go (one IP address, one domain
> name). The load balancer then directs the request to a single web server
in
> the farm. Now, each web server has to have its own IP address, and this is
> the IP address used by Report Manager to do a web service call to Report
> Server. This internal IP address is different from the external IP address
> made visible to the outside world by the load balancer. My suspicion is
that
> since the cookie was generated by the Report Server web service with the
> internal IP address (which, by the way is also the RootServerUrl for the
> service), when this same cookie is sent back from the browser, Report
> Manager rejects it because now the browser is using the outside domain
name
> which is different from the internal IP address from which the cookie was
> generated.
> Is there an attribute within the <forms> element that can fix this
problem?
> I've looked and I have not seen any. How about <machineKey>, how can that
> help me? Thanks very much again.
> --Carlos
> "Tudor Trufinescu (MSFT)" <tudortr@.ms.com> wrote in message
> news:OwWho7rlEHA.896@.TK2MSFTNGP12.phx.gbl...
> > Dev and Eval should work with custom authentication as well as the
> > Enterprise SKU. I am not sure why the domain name for the cookie
generated
> > by RS should be different than the domain report manager is in. BTW, you
> can
> > configure the RS cookie by changing settings in the <forms> tag in
> > Reportserver\web.config.
> >
> > --
> > Tudor Trufinescu
> > Dev Lead
> > Sql Server Reporting Services
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >
> >
> > "Carlos C Tapang" <ctapang@.centerus.com> wrote in message
> > news:O$4fD4plEHA.2884@.TK2MSFTNGP09.phx.gbl...
> > > I am using the Report Manager in a web farm configuration with custom
> > > authentication. It seems that neither the Developer nor the Evaluation
> > > editions can work in this configuration, even though the descriptions
> for
> > > these editions say that they're as capable as the Enterprise Edition
> (only
> > > the licensing differs). The problem seems to be that the cookie
> generated
> > by
> > > the Report Server web service, when passed back from the browser, is
> being
> > > rejected by the Report Manager. In a web farm, the domain name used to
> > > access the Report Manager is different from that used by Report
Manager
> to
> > > access the Report Server web service. They can not be the same, and I
> > think
> > > because of this the cookie generated by Report Server is being
rejected
> by
> > > Report Manager.
> > >
> > > I have tried SP1 and used the PassThroughCookie setting, but it still
> > > doesn't work. Do I need to get the Enterprise Edition now when I am
just
> > in
> > > development stage of this project?
> > >
> > > Thanks.
> > >
> > >
> >
> >
>|||Thanks again. I've read this and have tried setting ReportServerExternalUrl,
but it didn't seem to have any effect. I read the section of RS
documentation that you referred to below again, and determined that may be
my installation does not recognize that it is in a web farm. You see, in our
development environment, we are starting off with just one server, although
there is a load balancer that routes packets from the client to this one
server. So this RS server has its own NETBIOS machine name and IP address
separate and different from that of the load balancer. The client has no
access to the RS server NETBIOS machine name and IP address; it can only
access it through the load balancer. However, like I already said, we are
starting off with just one RS server.
The instructions for instalation in a web farm assume two or more servers,
and it seems that it is the presence of the second server that determines
the behavior of RS. In other words, if there is no second server, RS does
not behave like a web farm component. Is this true?
Also, how does RS deal with custom authentication in a web farm? Will RM
accept cookies generated by the Report Service web service on another domain
(ReportServerUrl should point to the same server in a web farm, which is
different for each server, and different from the main website URL). In
other words, has Microsoft tested RS in a web farm with custom
authentication?
--Carlos
"Tudor Trufinescu (MSFT)" <tudortr@.ms.com> wrote in message
news:uSJPzremEHA.3372@.TK2MSFTNGP15.phx.gbl...
> I think you could use your internal name for the RM SOAP Url. You could
then
> set up the ReportSeverExternalURL, which is what your clients will see:
>
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/rsadmin/htm/drp_deploying_v1_0h9e.asp
>
> --
> Tudor Trufinescu
> Dev Lead
> Sql Server Reporting Services
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> "Carlos C Tapang" <ctapang@.centerus.com> wrote in message
> news:u83lLZslEHA.3608@.TK2MSFTNGP09.phx.gbl...
> > Thank you for your response, Tudor. In the web farm I am working on,
there
> > is a load balancer to which all requests go (one IP address, one domain
> > name). The load balancer then directs the request to a single web server
> in
> > the farm. Now, each web server has to have its own IP address, and this
is
> > the IP address used by Report Manager to do a web service call to Report
> > Server. This internal IP address is different from the external IP
address
> > made visible to the outside world by the load balancer. My suspicion is
> that
> > since the cookie was generated by the Report Server web service with the
> > internal IP address (which, by the way is also the RootServerUrl for the
> > service), when this same cookie is sent back from the browser, Report
> > Manager rejects it because now the browser is using the outside domain
> name
> > which is different from the internal IP address from which the cookie
was
> > generated.
> >
> > Is there an attribute within the <forms> element that can fix this
> problem?
> > I've looked and I have not seen any. How about <machineKey>, how can
that
> > help me? Thanks very much again.
> >
> > --Carlos
> >
> > "Tudor Trufinescu (MSFT)" <tudortr@.ms.com> wrote in message
> > news:OwWho7rlEHA.896@.TK2MSFTNGP12.phx.gbl...
> > > Dev and Eval should work with custom authentication as well as the
> > > Enterprise SKU. I am not sure why the domain name for the cookie
> generated
> > > by RS should be different than the domain report manager is in. BTW,
you
> > can
> > > configure the RS cookie by changing settings in the <forms> tag in
> > > Reportserver\web.config.
> > >
> > > --
> > > Tudor Trufinescu
> > > Dev Lead
> > > Sql Server Reporting Services
> > > This posting is provided "AS IS" with no warranties, and confers no
> > rights.
> > >
> > >
> > > "Carlos C Tapang" <ctapang@.centerus.com> wrote in message
> > > news:O$4fD4plEHA.2884@.TK2MSFTNGP09.phx.gbl...
> > > > I am using the Report Manager in a web farm configuration with
custom
> > > > authentication. It seems that neither the Developer nor the
Evaluation
> > > > editions can work in this configuration, even though the
descriptions
> > for
> > > > these editions say that they're as capable as the Enterprise Edition
> > (only
> > > > the licensing differs). The problem seems to be that the cookie
> > generated
> > > by
> > > > the Report Server web service, when passed back from the browser, is
> > being
> > > > rejected by the Report Manager. In a web farm, the domain name used
to
> > > > access the Report Manager is different from that used by Report
> Manager
> > to
> > > > access the Report Server web service. They can not be the same, and
I
> > > think
> > > > because of this the cookie generated by Report Server is being
> rejected
> > by
> > > > Report Manager.
> > > >
> > > > I have tried SP1 and used the PassThroughCookie setting, but it
still
> > > > doesn't work. Do I need to get the Enterprise Edition now when I am
> just
> > > in
> > > > development stage of this project?
> > > >
> > > > Thanks.
> > > >
> > > >
> > >
> > >
> >
> >
>

Can "Windows Authentication" be used for SQL in distributed env.?

Hi all, we are about to move our SQL Server database onto a different machin
e from the machine that houses our web server (IIS). Currently our web appl
ication uses "windows authentication" - but once we move it to a different m
achine will we have to chan
ge the security mode? Or is there another way for our web server machine to
flow the identity to the other machine.
I tried looking this issue up online - but I saw no reference to it. I did
find this:
databasesecurity.asp" target="_blank">http://msdn.microsoft.com/library/d...asesecurity.asp
and it seems that the advice from Microsoft is that if you just create an id
entical account on both machines (including password) you can effectively co
nnect from the one machine to the other.
Or have I misunderstood?
Thanks for any advice,
NoviceYes. Either the web server could connect as the IUSR account, or if both
machines are in a domain, you could enable Security Delegation to allow the
end users credentials to pass thru and connect using Windows
Authentication. It depends on the security requirements of your
application and the environment.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.

Calling Webservice

Hi,
I have set the Reporting WebServices WebService Directory Security in
IIS to Windows Authentication. The authentication setting in the
config file is set to "Windows" with Impersonation set to "true".
I created an account called "RSAdminUser" with which to call the
webservice.
When calling the "ListReportsUsingDataSource" method, after setting
the credentials to this "RSAdminUser", I get the following error:
"System.Web.Services.Protocols.SoapException: The permissions granted
to user 'SERVER\RSAdminUser' are insufficient for performing this
operation. --> Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException:
The permissions granted to user 'SERVER\RSAdminUser' are insufficient
for performing this operation. at
Microsoft.ReportingServices.Library.RSService.ListReportsUsingDataSource(String
path) at Microsoft.ReportingServices.WebServer.ReportingService.ListReportsUsingDataSource(String
DataSource, CatalogItem[]& Reports) -- End of inner exception stack
trace -- at Microsoft.ReportingServices.WebServer.ReportingService.ListReportsUsingDataSource(String
DataSource, CatalogItem[]& Reports)"
I have methodically given this user permissions to all of the relevant
folders and files that I can think of, but the only thing that makes
this work is making "RSAdminUser" a member of the "Administrators"
group. Is it possible that only members of the "Administrators" group
are allowed to execute this method?
Is there an alternative solution? What permissions does this account
need to execute this method?
Thanks in advance,
AmyHi Amy:
Reporting services uses roles based authorization, and the default
setup only places the local administrator into a role.
While RSAdminUser might have rights to access all the files and
folders in the reporting services installation, you still have to put
the user into a "role". Roles are how RS determines who can browse a
folder, who can view a report, who can manage a data source etc.
From your reports home page you can go to Site Settings -> Configure
site wide security (link is at the bottom). Perhaps you should define
a new role for RSAdminUser and grant just enough authorization for the
user to get the things done you need.
Hope this helps,
--
Scott
http://www.OdeToCode.com
On 3 Aug 2004 05:04:48 -0700, amydudley@.webmail.co.za (Amy) wrote:
>Hi,
>I have set the Reporting WebServices WebService Directory Security in
>IIS to Windows Authentication. The authentication setting in the
>config file is set to "Windows" with Impersonation set to "true".
>I created an account called "RSAdminUser" with which to call the
>webservice.
>When calling the "ListReportsUsingDataSource" method, after setting
>the credentials to this "RSAdminUser", I get the following error:
>"System.Web.Services.Protocols.SoapException: The permissions granted
>to user 'SERVER\RSAdminUser' are insufficient for performing this
>operation. --> Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException:
>The permissions granted to user 'SERVER\RSAdminUser' are insufficient
>for performing this operation. at
>Microsoft.ReportingServices.Library.RSService.ListReportsUsingDataSource(String
>path) at Microsoft.ReportingServices.WebServer.ReportingService.ListReportsUsingDataSource(String
>DataSource, CatalogItem[]& Reports) -- End of inner exception stack
>trace -- at Microsoft.ReportingServices.WebServer.ReportingService.ListReportsUsingDataSource(String
>DataSource, CatalogItem[]& Reports)"
>I have methodically given this user permissions to all of the relevant
>folders and files that I can think of, but the only thing that makes
>this work is making "RSAdminUser" a member of the "Administrators"
>group. Is it possible that only members of the "Administrators" group
>are allowed to execute this method?
>Is there an alternative solution? What permissions does this account
>need to execute this method?
>Thanks in advance,
>Amy