Re: sql server authentication with named domain account

Interesting.  I had in mind using the ASP .Net membership system.  Are you
intending to use Windows Authentication?

This how-to http://msdn.microsoft.com/en-us/library/ms998358.aspx say's:

"Windows authentication without impersonation. This is the default setting.
ASP.NET performs operations and accesses resources by using your
application's process identity, which by default is the Network Service
account on Windows Server 2003."

Which suggests to me that Integrated Security would see the Network Service
account and connection pooling would be just fine.

I think you need an experiment.

Cheers,

- Richard

[email protected]
www.dynamisys.co.uk
Land line +44 1793 731225
Mobile +44 7732 971786

-----Original Message-----
From: Discussion of building .NET applications targeted for the Web
[mailto:[email protected]] On Behalf Of Mark Aurit
Sent: 21 June 2008 14:10
To: [email protected]
Subject: Re: [DOTNET-WEB] sql server authentication with named domain
account

Which is what Id hoped would be the case.  But the below MSDN article, under
"Pool Fragmentation Due to Integrated Security", would seem to say the
opposite; that the pool is at the individual user level and therefore not
conducive to scalibility.  In other words, the ado.net version of running
under
the user identity, which as you say its not a good thing.
http://msdn.microsoft.com/en-us/library/8xx3tyca.aspx

On Fri, Jun 13, 2008 at 7:01 AM, Mark Aurit <[email protected]> wrote:

> (I posted this yesterday but it didnt come back.  Since its of important
> to me right now Im going to post it
> again, sorry if you are getting it twice)
>
> Im creating an asp.net/sql server app; Id prefer to use a sql server
> account to maximize connection pooling, our security guy wants
> integrated security.  We've reached an agreement where I can use a
> single account as long as its a domain account, but Ive been unable to
> figure out how to do so (if its even possible). Im thinking I either
> need to use integrated security but force sql server to use a single
> account, or use a regular connection string, naming the domain account
> and password with Integrated Security=false.
> Does want I want to do sound possible?
> Thanks, Mark
>
> ===================================
> This list is hosted by DevelopMentor(R)  http://www.develop.com
>
> View archives and manage your subscription(s) at
> http://discuss.develop.com
>



--

=======================
[email protected]

===================================
This list is hosted by DevelopMentorR  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com
No virus found in this incoming message.
Checked by AVG.
Version: 8.0.100 / Virus Database: 270.4.1/1512 - Release Date: 6/21/2008
9:27 AM

===================================
This list is hosted by DevelopMentor®  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com