ODBC and MS/SQL Server Integrated Security

ODBC and MS/SQL Server Integrated Security

Post by Amit Mis » Wed, 03 Apr 1996 04:00:00



Folks,

I am developing an application (using Visual C++) which uses ODBC API to
log and/or retrieve data from an MS/SQL Server database.  I'm developing
this on a DEC APLHA Windows NT Workstation, though the final application
will run on an NT server.  I'm using MS/SQL 6.0.

My question/problem relates to the SQLConnect() function in ODBC.  This
function (and its variants) require that a user login ID and a password
be explicitly specified.  So I set up a login ID with the SQL server and in
my program, I open the connection with the login ID and password that I
had set up.  Things work fine.

However, I'd like to be able to open the connection for whichever NT
user happens to be running the application (depending on whether the
permissions have been set appropriately in SQL).  So I set the security mode
of the SQL server to "Integrated with NT,"  set up a user group and a user
on the NT workstation, and granted permissions to the users in that
group using SQL Server Security Manager.

There are two problems I am facing:

1. It seems that I still need to specify a password (using Manage Logins
in SQL Enterprise Manager) for these users to log in using programs like
isql (actually ISQL/w).  Is this because these programs don't use
trusted connections ?  Do I need to install Windows NT Server on my
machine to make this work ?  Is it something else ?

2. ODBC does not seem to have a way to connect to a driver with just the
username or the SID or group ID.  Is it possible to do so ?

Any help will be much appreciated.  If I need to RTFM, please point me
to the correct one, for my attempts so far to divine any solution from
the books online have failed.  Regards,

- Amit

 
 
 

ODBC and MS/SQL Server Integrated Security

Post by Lynne Warne » Thu, 04 Apr 1996 04:00:00


< snipped>

Quote:> There are two problems I am facing:

> 1. It seems that I still need to specify a password (using Manage Logins
> in SQL Enterprise Manager) for these users to log in using programs like
> isql (actually ISQL/w).  Is this because these programs don't use
> trusted connections ?  Do I need to install Windows NT Server on my
> machine to make this work ?  Is it something else ?

> 2. ODBC does not seem to have a way to connect to a driver with just the
> username or the SID or group ID.  Is it possible to do so ?

> Any help will be much appreciated.  If I need to RTFM, please point me
> to the correct one, for my attempts so far to divine any solution from
> the books online have failed.  Regards,

> - Amit

Amit,
I have not implemented Integrated Security yet, but have done some heavy
reading on it.  It is my understanding that the first connection to SQL
Server by a new user will prompt a login dialog.  SQL Server then uses
RPC's to NT to validate the user. The server will then ignore the userid
and password of any subsequent (trusted) connections, thereby rendering
irrelevant whatever userid and password you put in them.  I seem to
remember that ISQL is a standard connection, for reasons that have
escaped me, forcing you to logon each time.

I gleaned this meager knowledge by searching the online books for  
"integrated security" and  reading everything that was found (gag).

Good luck, and I'd like to here other responses.

Lynne

 
 
 

1. NT4.0 /SQL-Server integrated security and odbc-connections

Hi,

I want to use NT/Sql-server integrated security on my database.
Acknowledged users have read/write access to the database, but this
should only be possible through a certain front-end application (I am
using Business Objects and the database intended is my BO-repository).
I don't want these users to be able to access my database through
other odbc-enabled applications like ms-access and ms-query etc.
because they can do a lot of harm if they can get in without that
specific tool.

Does anybody know how to force this, while using integrated security
as opposed to standard SQL-server security.

Thanks very much for any help you can give me,

Diederik Dellaert



2. 100 concurrent users on O7 / WinNT 4

3. How to integrate Access application security with a SQL Server security

4. access base in another form

5. XMLBulkLoad Works with integrated security, fails with SQL Server security

6. 1 * mpJzmjUmE-JOIN syntax to find alienated records

7. Q: Best practise IIS (DMZ) using integrated security to MS SQL (prod)

8. Performance Problem-XPATH

9. MS Remote and SQL Integrated Security

10. NT and ms sql 6.5 integrated security

11. How to connect to SQL Server through ADO (SOL Server uses Integrated Security)

12. COM+ and SQL Server; COM+, SQL Server, and Integrated Security; Integrated Security [Solved :-)]