«

Hi all

I have an issue which goes something like this

I have a web app that accesses a SQL Sever. I use AD for my users. In
SQL i have assigned my users to various roles etc....not SQL users but
AD users.

my web app uses identity impersonation = true and i have disabled
anonymous access in IIS

I have a development environment with XP, IIS5 and ver 1.1 of
framework. The web app works fine and shows my results.


I have a win2k server with IIS 5 on it and when i deploy my app to this
machine, which is part of the domain and IIS is configured the same
way, I get what seems to be the double hop issue. So i have ensured
that the anonymous access is diabled in IIS and integrated security is
turned on. the machine is part of the domain. I have installed the sql
client tools on the web server....no matter what i do i cannot access
SQL server...it keeps giving me the Login failed for user 'NT
AUTHORITY\ANONYMOUS LOGON'. error. I checked the user name of the
person accessing the page by using
System.Security.Principal.WindowsIdentity.GetCurre nt().Name and the
username is being written out however when this information passes to
SQL i still get the anonymous user error...

Can you please help me with this issue? I am really at a loss here...

Thank you.
Reeza

Hi,

there are some more things to take into consideration - i guess you only
tested locally on your WinXP machine - this is technically not delegation
- thats why it probably worked...

read more here:
http://msdn.microsoft.com/msdnmag/is...s/default.aspx

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> Hi all
>
> I have an issue which goes something like this
>
> I have a web app that accesses a SQL Sever. I use AD for my users. In
> SQL i have assigned my users to various roles etc....not SQL users but
> AD users.
>
> my web app uses identity impersonation = true and i have disabled
> anonymous access in IIS
>
> I have a development environment with XP, IIS5 and ver 1.1 of
> framework. The web app works fine and shows my results.
>
> I have a win2k server with IIS 5 on it and when i deploy my app to
> this machine, which is part of the domain and IIS is configured the
> same way, I get what seems to be the double hop issue. So i have
> ensured that the anonymous access is diabled in IIS and integrated
> security is turned on. the machine is part of the domain. I have
> installed the sql client tools on the web server....no matter what i
> do i cannot access SQL server...it keeps giving me the Login failed
> for user 'NT AUTHORITY\ANONYMOUS LOGON'. error. I checked the user
> name of the person accessing the page by using
> System.Security.Principal.WindowsIdentity.GetCurre nt().Name and the
> username is being written out however when this information passes to
> SQL i still get the anonymous user error...
>
> Can you please help me with this issue? I am really at a loss here...
>
> Thank you.
> Reeza

Thank you Dominick.....excellent article....the delegation solved our
problem....