Connect To SQL Server To Run T-SQL Use Other's Domain Account?
Mar 1, 2010
In our database we have an SQL server account that has the correct roles to access some of the databases.All of our PC and Servers are in domain using Windows Account. Now there is ASP.NET web application, we want the users in the domain to browser some data in the sql server. But we do not want to grant direct permission to every person, so is it possible to connect to sql server and run some T-SQL without granting permission to users using one specify account?
I have an ASP.NET web app where I use an ado sql connection to connect to a database on a SQL Server. The ado connection string is provided with a user login that has sufficient rights to read/write to the database. I originally pushed out the web app in its own IIS web site, using its own application pool and everything worked fine.
However, I am now trying to include the web app under an already existing web site. Everything seemed to work fine until I tried any functionality that called for an INSERT or UPDATE to the database. It turns out the user connecting to the DB didn't have sufficient permissions. Finding this strange, I did some research and found a forum post that suggested the IIS Web Site service account needed read/write permissions in the SQL database in order for an app to perform INSERT/UPDATE. Is this true?
I tested it out, and yes, indeed it worked, only with the Application Pool Identity account. The deatails of my scenario are as follows:
The web app's first IIS Web Site had an application pool Identity that ran under NETWORK SERVICE, which already had a login for SQL SERVER The already existing web site's application pool Identity runs under a domain account. This site already runs another web app that connects to the same database using LINQ (developed by someone else). I am relatively new to web development and am more familiar with ADO, so that is the route I chose.The domain account mentioned above formerly had no SQL Server login/user mapping. I set it up as a dbowner, and viola, the new web app worked under the existing web site.
While I found a way for it to work, we would rather not create a SQL login for this Identity account. We want the login provided in the web app's ADO SqlConnection to be the one to actually connect, because isn't that the point of it?
I have an ASP.Net app, that runs using windows authentication. The connection to the SQL Server is usually done by creating a sql server account and using that in the connection string.
However, in this specific very restrictive hosting environment, we have been asked to use a specific WINDOWS/active directory account to connect to the SQL Server.
note it is not the windows credentials of the user of the website, we need to connect to the SQL server with - it is one specific windows/AD account.
My feeling says it's not posible but anyway I am curious if there is at least a workaround for accomplish this.Basically I am working at my client site and my machine is not connected to the domain.What I want to do is running a web application locally under a domain account, and using the webdev server.The webapp uses the default authentication, windows authentication that is.I tried using impersonation with domainuser & password but I got the following error Could not create Windows user token from the credentials specified in the config file. Error from the operating system 'Logon failure: unknown user name or bad password.I have to mention that the username and the password are correct.
My feeling says it's not posible but anyway I am curious if there is at least a workaround for accomplish this.Basically I am working at my client site and my machine is not connected to the domain.What I want to do is running a web application locally under a domain account, and using the webdev server.The webapp uses the default authentication, windows authentication that is.I tried using impersonation with domainuser & password but I got the following error Could not create Windows user token from the credentials specified in the config file. Error from the operating system 'Logon failure: unknown user name or bad password.I have to mention that the username and the password are correct.
I am trying to build a login page as follows.On the machine on which i want to host the application i have a windows administrators group in which some windows domain users are.Now on building the login page i only want those people to access the application on login. What is the best way to acomplish this.
I'm getting "Windows NT user or group 'domainwebservername' not found" when I query the following. Why? This is how I got ny domain and webservername. Response.Write(Environment.UserDomainName); Response.Write(Request.ServerVariables["SERVER_NAME"]);
-- Create a SQL Server login for your application's domain account sp_grantlogin 'domainwebservername$' -- Grant the login access to the membership database USE aspnetdb GO sp_grantdbaccess 'domainwebservername$', 'Web Server Name' -- Add user to database role USE aspnetdb GO sp_addrolemember 'aspnet_Membership_FullAccess', 'domainwebservername$'
Can a user connect to my web site using an Orkut account ? Just like Google Friend Connect or Facebook, but with Orkut.
The idea is, the user goes to my web site, I have a "Connect using Orkut" button there, on click takes him to the Orkut login page, once s/he logins and grants access to my app, get's redirected to my web site with the Orkut ID as a parameter. The same procedure that works for Google Friend Connect and also Facebook Connect....
I haven't seen an example of this with Orkut. Can it be done ? Is there an Orkut Connect or similar ?
A sample in c# would be excellent, but I would be happy with a sample in any language.
I need an idea please, i have the task of disabling the Domain Administrator account, but we have a very messed up AC and im practilly new employee here. The administrator account has been used on several services, servers, print servers, etc. Across the network and sites. All our intersite communication is perfect.So what i want is a way to know in which devices this account is configured.Is there a way or tool, where i can input the account, and the output should be a list of servers, ip adresses or devices where the account is configured?
I've been researching and I've spent pratically all day on this. Here's my issue. The website uses forms authentication that we authenticate against active directory. I've been attempting to access files we have on a network share and push them down to the user (when they request them) in an http response. I keep getting "Access to the path <unc path> is denied".
Here's the code:
[Code]....
Things I've tried:1) When I add the "Computer" to the permissions of the folder it works and I dont even need to emulate a user (essentially just commenting out this code), but I'm not sure we want to explicitly give the computer access to some of our network shares 2) I've verified it's the correct username and password for the active directory account and that they have permissions on these network shares 3) I've fooled around with the WebProxy class with no luck (as I'm not entirely familiar with it) 4) I've tried impersonating the user by creating a windows token and passing the token as credentials (i've done this with similar websites) with no luck, plus this seemed a bit complicated for something I figured would be relatively easy.Its almost as if, the WebClient class isn't even using the credentials i've passed it.We've got it working now, but only by giving the "Computer" specific permissions on the network shares, which we'd like to avoid.
I have an asp.net application which was working fine with the AppPool Identity set to Netwrok Service or Local System or Local Service. But If I change the app pool identity to a domain account (I am using my account itself) I am unable to access the application from any other machine except the web server.I am using Windows Integrated Authentication.I tried resetting IIS, Restart W3SVC, aspnet_regiis -ga . But no luck.
In some sites specially online shops, users can pay from thier bank account or cridit card.how can we implement online payment. what is the proccess of online payment? is there any API or Dll for this.
I have created a web service that authenticates with username and password, works fine. Basically this one, http://msdn.microsoft.com/en-us/library/ff649647.aspx
Now I also want to connect to this web service using client certificates, works fine http://msdn.microsoft.com/en-us/library/cc948997.aspx
But I would like to when authenticated via client certificates, connect that certificate to a user in the membership database. So that I can use Roles.IsUserInRole(...) and such.
I thought that, well if I implement a Custom certificate Validator http://msdn.microsoft.com/en-us/library/ms733806.aspx then I could check for example subject and map that against a created username in the membership database.
But in the class X509CertificateValidator public override void Validate(X509Certificate2 certificate) I don't have the same ability as when the user is authenticated like
app.Context.User = new GenericPrincipal(new GenericIdentity(username, "Membership Provider"),roles); within public override void Validate(X509Certificate2 certificate)
and if that is not possible, can this be solved differently? Bottom line, how do I connect a client certificate to a user account in the membership database. Is there a MSDN article on how to do this?
I'd like to connect to a database on a different domain. I've done some search and people say to add a connectin using an enterprise manager? Where can I find sql enterprise manager? On msn website, they only show things about sql enterprise manager for sql 2000. Is this a tool only included in sql 2000?
Is it possible to run a web service as a particular user/service account in the same way a Windows service can?I have a service account used for connecting to the DB and want to run the webservice under this account as the users using the webservice won't have DB access.The way I see to do it is to include the Impersonate option in the Web.config file, but is there any better way to do this?
I've got an ASP.NET website, and its connecting to a database I've created on SQL Server 2k8 and I'm using windows integrated security on my connection string between asp.net and SQL Server. What account should I give permissions to my database inside SQL Server? Should I give NT AUTHORITYNETWORK SERVICE permission to my database? Right now, I right clicked the network service account, and went to properties, and then I checked my database under "users mapped to this login:" and then in the "database role membership for" diaglogue I then selected public and db_owner. Is that right?
Code: Dim objstrSupUser As String = "" 'Load the user from the membership provider Dim strUserName As String = ctlLogin.UserName If ctlLogin.UserName.IndexOf("(") > 0 Then objstrSupUser = Regex.Match(strUserName, "(([^)]*))").Groups(1).Value
Do I just need to make a field for account type in my user account table? In a technical way, if(account type = admin) then the account would log as admin; otherwise, a user with less privileges.
I have an ASP.NET page where at the top of the page is a search box. There are 2 text boxes - one is an autocomplete extender for the Name on a database, and one is just inputting the ID.The page features DetailsViews and GridViews primarily, and even when no account has been searched for, these display blank data which is not ideal. I sort of fixed this by using if (IsPostBack), encasing the elements in a placeholder and setting it to visible only if the page ispostback. But this doesn't cover if the user types in an incorrect ID.
Also, some accounts have huge amounts of data inside the GridView's. I had an issue where because I have no way of detecting when a data source's rows has changed, I end up binding whenever the page loads (Page_Load method). I've come to realise this is simply very bad - there are lots of times when the user can click various things in the page and have the page postback, and it takes an eternity to load each time I click something for accounts with lots of data.Anyway, my question is essentially two-fold but I have a feeling the solution will be similar:1: How can I detect when there are no accounts returned when searching, and disable the Grids/Detailsviews and show an error message?2: How can I figure out when the user searches for another account and only rebind the grids after that has happened?
I have use the mvc 2 web site template and I would like to attach
A user db that I have already created
In my web config file I have change the connection string to this"
[Code]....
When I'm tring to register I'm getting this error :
Login failed for user ''. Description: An unhandled exception occurred during the execution of the current web request. review the stack trace for more information about the error and where it originated in the code. Exception Details: System.Data.SqlClient.SqlException: Login failed for user ''.Source Error:
[Code]....
I have set a break point in line 127 and I can clearly see that is getting the data (username ,password ,email) What is wrong( with the contion string)?
I just installed SQL Server 2008 Management studio Express on my Vista machine.i tried connecting to local machine using :
.sqlexpress, (local)sqlexpress, or .SQLExpress, MyPCNAMESQLExpress
nothing is working, getting this error:
----------------------------- Cannot connect to PC-NAMESQLEXPRESS. A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: SQL Network Interfaces, error: 26 - Error Locating Server/Instance Specified) ----------------------------
I'm getting "Cannot connect to ASP.NET development server" almost every time I stop the ASP.NET server before restarting the project in debug mode. It can take between 15 seconds and 2 minutes to get the error message, and Visual Studio is frozen.
Sometimes I get three in a row, and I have to wait 2 minutes each time, or go into Task Manager and kill to process. Then I have to start Visual Studio 2010 again, which is at least three times slower than Visual Studio 2008 to open.
It's *extremely* annoying. I know I don't have to close the server if the code has changed, but sometimes I simply want to restart my website in debug mode (there is a cache on most web service calls, so this clears the cache). A workaround is to add "foo" code to a class and restart the project.
I'm running Visual Studio 2010 Professional on Windows Server 2008. I'm running the Visual Studio Power Tools too, with the latest update.
i'm using asp.net 3.5 and my site is hosted on godaddy i have a contact us form on the site. and i have to send the contact queries on [URL] which is hosted on godaddy. whenever i try sending mails i get this error
The transport failed to connect to the server.
Description:
An unhandled exception occurred during the execution of the current web request. review the stack trace for more information about the error and where it originated in the code. Exception Details: System.Runtime.InteropServices.COMException: The transport failed to connect to the server.
Source Error:
[Code]....
Line 250: SmtpMail.SmtpServer = "smtpout.asia.secureserver.net"; Line 251: mailmsg.Priority = System.Web.Mail.MailPriority.Normal; Line 252: SmtpMail.Send(mailmsg); Line 253: } Line 254: }
i tried changing smtp to relay-hosting.secureserver.net aswell. but it didn't work. i'm using this method of my classfile's sendmail class public void SendMessage(string From, string ToEmail, string subject,string body)
