Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
User for web service
Message
From
20/12/2012 13:37:30
 
 
General information
Forum:
Microsoft SQL Server
Category:
Security
Miscellaneous
Thread ID:
01560281
Message ID:
01560326
Views:
44
>>>>>>Hi
>>>>>>
>>>>>>I want to create a specific user to be used by a web service so any amendments by the web service in the database are tagged with that userid. (at the moment everything is going under sa)
>>>>>>
>>>>>>When I run a create user command I get an error.
>>>>>>
>>>>>>Windows NT user or group 'DEV01\Test.User' not found. Check the name again.
>>>>>>
>>>>>>What do I need to do (or a link to a good summary) to make this happen.
>>>>>
>>>>>Do you mean that you just want a single user account for all hits on the web service or that you want to narrow it down to the specific user who is accessing the service ?
>>>>
>>>>Hi Viv
>>>>
>>>>I would like a single account for all hits on the web service to differentiate changes to the database via the web service from changes via the in house system
>>>
>>>Then I guess the answer depends on how IIS (I'm assuming that's what is hosting the web service) is configured and how much control you have over it. Some options:
>>>
>>>1. Configure the relevant application pool to use a specific user.
>>>2. If possible use a nested web.config to specify the user
>>>3. Code the relevant user impersonation into the web service
>>>
>>>See http://support.microsoft.com/kb/306158?wa=wsignin1.0 for examples of the two latter approaches....
>>
>>Thanks Vicv
>>
>>any idea what craig was getting at ?
>
>Hi Nkolas :-}
>
>Other than the obvious risks of allowing anonymous access (DOS attack) no....
>Of course I'm assuming SQL commands cannot be directly acted on by the web service...

Thanks

excuse my typos. I put it down to the blow on the head ..
Previous
Next
Reply
Map
View

Click here to load this message in the networking platform