Plateforme Level Extreme
Abonnement
Profil corporatif
Produits & Services
Support
Légal
English
User for web service
Message
De
20/12/2012 13:37:30
 
 
À
20/12/2012 11:34:47
Information générale
Forum:
Microsoft SQL Server
Catégorie:
Sécurité
Divers
Thread ID:
01560281
Message ID:
01560326
Vues:
47
>>>>>>Hi
>>>>>>
>>>>>>I want to create a specific user to be used by a web service so any amendments by the web service in the database are tagged with that userid. (at the moment everything is going under sa)
>>>>>>
>>>>>>When I run a create user command I get an error.
>>>>>>
>>>>>>Windows NT user or group 'DEV01\Test.User' not found. Check the name again.
>>>>>>
>>>>>>What do I need to do (or a link to a good summary) to make this happen.
>>>>>
>>>>>Do you mean that you just want a single user account for all hits on the web service or that you want to narrow it down to the specific user who is accessing the service ?
>>>>
>>>>Hi Viv
>>>>
>>>>I would like a single account for all hits on the web service to differentiate changes to the database via the web service from changes via the in house system
>>>
>>>Then I guess the answer depends on how IIS (I'm assuming that's what is hosting the web service) is configured and how much control you have over it. Some options:
>>>
>>>1. Configure the relevant application pool to use a specific user.
>>>2. If possible use a nested web.config to specify the user
>>>3. Code the relevant user impersonation into the web service
>>>
>>>See http://support.microsoft.com/kb/306158?wa=wsignin1.0 for examples of the two latter approaches....
>>
>>Thanks Vicv
>>
>>any idea what craig was getting at ?
>
>Hi Nkolas :-}
>
>Other than the obvious risks of allowing anonymous access (DOS attack) no....
>Of course I'm assuming SQL commands cannot be directly acted on by the web service...

Thanks

excuse my typos. I put it down to the blow on the head ..
Précédent
Suivant
Répondre
Fil
Voir

Click here to load this message in the networking platform