Re: sql server authentication with named domain account

Yes it's possible.

My first recommendation is not to bother.  Unless you have configured
impersonation in the web config file - hint DON'T configure impersonation -
then the default settings will give you the connection pooling you want.

The default is for the web site to run under the account ASPNET (IIS 5) or
Network Service (IIS 6).  When you use Integrated Security, as far as the
database is concerned ALL database activity happens as ASPNET/Network
Service.  You create an account in SQL Server with the appropriate name,
give it access to the database you are using and away you go.  Connection
pooling just works - so long as you use an identical connection string in
every call.

That's the recommended approach and it still works even if you have an web
site where users have to login.



If you really want to use a named account then, exactly as you said, you use
a connection string that specifies the account and password.  This is
generally considered a 'bad thing' because it requires the password in the
connection string.


Cheers,

- Richard

[email protected]
www.dynamisys.co.uk
Land line +44 1793 731225
Mobile +44 7732 971786
-----Original Message-----
From: Discussion of building .NET applications targeted for the Web
[mailto:[email protected]] On Behalf Of Mark Aurit
Sent: 13 June 2008 15:02
To: [email protected]
Subject: [DOTNET-WEB] sql server authentication with named domain account

(I posted this yesterday but it didnt come back.  Since its of important
to me right now Im going to post it
again, sorry if you are getting it twice)

Im creating an asp.net/sql server app; Id prefer to use a sql server
account to maximize connection pooling, our security guy wants
integrated security.  We've reached an agreement where I can use a
single account as long as its a domain account, but Ive been unable to
figure out how to do so (if its even possible). Im thinking I either
need to use integrated security but force sql server to use a single
account, or use a regular connection string, naming the domain account
and password with Integrated Security=false.
Does want I want to do sound possible?
Thanks, Mark

===================================
This list is hosted by DevelopMentorR  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com
No virus found in this incoming message.
Checked by AVG.
Version: 8.0.100 / Virus Database: 270.4.1/1511 - Release Date: 6/20/2008
11:52 AM

===================================
This list is hosted by DevelopMentor®  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com