Plateforme Level Extreme
Abonnement
Profil corporatif
Produits & Services
Support
Légal
English
User for web service
Message
De
20/12/2012 11:34:47
 
 
À
20/12/2012 11:24:13
Information générale
Forum:
Microsoft SQL Server
Catégorie:
Sécurité
Divers
Thread ID:
01560281
Message ID:
01560304
Vues:
37
J'aime (1)
>>>>>Hi
>>>>>
>>>>>I want to create a specific user to be used by a web service so any amendments by the web service in the database are tagged with that userid. (at the moment everything is going under sa)
>>>>>
>>>>>When I run a create user command I get an error.
>>>>>
>>>>>Windows NT user or group 'DEV01\Test.User' not found. Check the name again.
>>>>>
>>>>>What do I need to do (or a link to a good summary) to make this happen.
>>>>
>>>>Do you mean that you just want a single user account for all hits on the web service or that you want to narrow it down to the specific user who is accessing the service ?
>>>
>>>Hi Viv
>>>
>>>I would like a single account for all hits on the web service to differentiate changes to the database via the web service from changes via the in house system
>>
>>Then I guess the answer depends on how IIS (I'm assuming that's what is hosting the web service) is configured and how much control you have over it. Some options:
>>
>>1. Configure the relevant application pool to use a specific user.
>>2. If possible use a nested web.config to specify the user
>>3. Code the relevant user impersonation into the web service
>>
>>See http://support.microsoft.com/kb/306158?wa=wsignin1.0 for examples of the two latter approaches....
>
>Thanks Vicv
>
>any idea what craig was getting at ?

Hi Nkolas :-}

Other than the obvious risks of allowing anonymous access (DOS attack) no....
Of course I'm assuming SQL commands cannot be directly acted on by the web service....
Précédent
Suivant
Répondre
Fil
Voir

Click here to load this message in the networking platform