I have a server running SQL Server 2005, using Windows Authentication.
On the same server, I have IIS running hosting the ASP page.
For whatever reason, if I do not give read/write permissions to the NT Authority/Network Service account, the page won't load, as the SQL statements can't be run. How do I get the propper credentials to be passed from the ASP page through IIS to the SQL 2005 instance? The page works flawlessly with my own credentials through my dev environment, but not once I post it to IIS.
If there's an easier item to use and cofigure(ie Apache, etc...) I can change from IIS. Any ideas?
Your application pool runs by default as network service. Do Not give that account access in sql, that is not a good idea. Instead set up a new network user for your application. Then set up a new application pool. Point your web site to this app pool. In the app pool set the identity to the new network user. Next add the new network user to the IIS_WPG group on the web server box. The network user and the IIS_WPG group will need security access to the web site folder.
At this point the web application will be running as the new network user and you should be able to assign rights in sql to that user.
Well, that sort of helps... But the users for the ASP page each have their own Windows account, and based on those accounts, I need to restrict access to some parts of the SQL Server (Select only in some cases, Select, Insert, Delete, Update in others.) Is there no way to pass the individual's Windows credentials through to the SQL Server through the ASP Page?
That is true that each user has their own Windows account, but for the connection to sql server it uses the app pools identity. I would restrict access to things like insert update and delete in the UI based off authenticating the user. I don't think you want to wait until the user trys to insert a record and then pass back a sql server error. The user should never be able to do the insert to begin with.
Using the app pool's identity for sql access makes it easier to manage as well. You only have to worry about giving one network user rights to stored procedures etc. Did I mention all sql access from a web service should probably be through stored procedures?
Now I would say do not try to manage the web sites sql access with your windows authentcated users, but if you still want to go down that route you can, even though I think it is a bad idea. There is an identity impersonate available in the web.config file, but that means you must use windows authentication and most likely your web app is on your local intranet.
Well, the app is only being used internaly, on our network, which is the reason for using Windows Authentication. It's never being published to the internet. I'm still thinking the ideal way to do this is going to be through SQL Permissions, though I will also be handling security on the IIS server as well. One page in particular has the ability to update and delete items from a table, but I only want select users to actually be able to do that.
So, that being said, how do I go about implementing identity impersonation? I know, it's a newbie question... But I'm still getting started with ASP stuff, coming from Windows programming.
I'm using ASP.NET to send a response to a browser where I want to show an Excel document. This works fine but I have a problem. It only opens the workbook not Excel. I want to see the excel application with a toolbar so it will be possible for the user to save the document.
I have an asp table to which i add textboxes and values to those textboxes dynamically in the code behind. The user can edit the values in those textboxes and those are updated in the database correspondingly. Now my problem is that i have a dropdownlist in the same page and on selected index change of this i have to repopulate the asptable once again in the same manner- dynamic textboxes and values.Once i do this, the asp table is holding the same old values that were there inspite of filling the table newly. How can i solve this problem??I have not set any viewstate to true here.plz help. Its urgent!
thanks in advance
i have to make multilingual pages in asp.net.i made one pg in english and then copied its resource file to make another resource file for urdu.in the Initilize culture method it gives me this exception:
System.NotSupportedException: Culture 'ur' is a neutral culture. It cannot be used in formatting and parsing and therefore cannot be set as the thread's current culture
'ur' is for urdu
Any suggestions / ideas would be greatly appreciated.
I currently have an application that uses 4 databases and three sql servers. The first database is a great plains database. This is where the order starts. The second database is for the web UI which is where the can add products to the order. The third database is where the web order is set for producing the product. The fourth database is used on site where the product is produced at the plant.
We need all four database to separate logical processes. The initial order entry database is in micro soft great plains, so there isn't much we can do about that one. The second database issolates our web UI. The third contains all the data needed to produce the product. The four runs on site to help track what has been produced and where it is at in production.
In a project of online shopping where number of sellers have there shops, developed in asp.net & c#.
I'm storing shopid in a session on one page and this shopid is then used to display related information of the shop .
For ex, on pressing "sold products" button we will get sold products of related shop.
Problem is that ,
If I opened one shop1 then went to another shop say shop2, now currently I have shopid of shop2 in session .
Now when we navigate to the previous page of the flow using browser's back button and click on the link "Sold product" I dont get sold products of shop1 but shop2. It means I'm getting information related to seesion value
currently in session.
Hope you might have got the problemm.Please guide.
Is there any way to obtain value of session variable from history??like that...
I am creating popup window for searching employee record ....the senerio are as follow
Main form name (Visitor's Information) in which i select employee through popup window...but when i search employee in popup window i want to return specific search employee to my main form(Visitor's form)....i successfully created search form but not able to retrieve employeeid from my popup window to my main form.... i have an employeeid in my textbox