IIS and SQL Server on diff computers

hi paul,

thanks for your reply

i have read the kb before but i dont know what to do next
it says:
NOTE: This limitation was fixed in Windows 2000 but for Kerberos security
only.

is there anything to set on our windows 2000 domain?
i have asked our network admin to look into this but we still cant find the
solution...

i have also tried other kb as well

is there something to set for this:
IE must authenticate to the IIS server using Kerberos, not NTLM.

thanks again

regards,
linette

"Paul Lynch" <paul.lynch RemoveThis @nospam.com> wrote in message
news:g58060dpopc6iec05uj40cjeil61bq2l67@4ax.com...
 > On Tue, 23 Mar 2004 19:05:47 +0800, "linetlte" <linette RemoveThis @wpro.who.int>
 > wrote:
 >
  > >hi,
  > >
  > >we have this issue that when i use Integrated Windows Authentication, we
  > >cannot access the sql server
  > >it seems the user's credentials are not being passed on to the sql server
  > >so for now, i use Basic Authentication but this prompts users for login
  > >
  > >pls advise
  > >thanks
  > >
  > >regards,
  > >linette
 >
 > Linette,
 >
 > Read this KB article :
 >
 > INFO: Accessing SQL Server with Integrated Security from ASP
<font color=purple> > <a style='text-decoration: underline;' href="http://support.microsoft.com/?id=176377</font" target="_blank">http://support.microsoft.com/?id=176377</font</a>>
 >
 >
 > Regards,
 >
 > Paul Lynch
 > MCSE<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: IIS and SQL Server on diff computers 

Internet Explorer will not auto-logon when Basic Authentication (or any
other type of authentication other than IWA is used):
http://support.microsoft.com/?id=258063

Secondly, when using IWA, IIS never has the user's password. All it has is a
token from the Domain Controller saying the user is who they say they are.
This token does not have permissions to logon to remote resources. When you
use Basic authentication, the username and password are passed in cleartext
to IIS, so IIS has the necessay information to impersonate the user account
directly

If you are using Windows 2000 Domain, then you can use Kerberos delegation
as Paul Lynch has pointed out. IE must authenticate to the IIS server using
Kerberos, not NTLM.

If you are using a Windows 2003 Domain, then there is new functionality
called Protocol Transition. This means that the clients can authenticate to
the server using any protocol (such as Digest, or NTLM), and this can be
translated into a Kerberos token for IIS to logon to the remote SQL Server.
If you are in this situation, let me know, and I'll dig up the docs on how
to do this.

Cheers
Ken


"linetlte" <linette.RemoveThis@wpro.who.int> wrote in message
news:%23lBo7aMEEHA.3128@TK2MSFTNGP09.phx.gbl...
: hi,
:
: we have this issue that when i use Integrated Windows Authentication, we
: cannot access the sql server
: it seems the user's credentials are not being passed on to the sql server
: so for now, i use Basic Authentication but this prompts users for login
:
: pls advise
: thanks
:
: regards,
: linette
:
:
 >> Stay informed about: IIS and SQL Server on diff computers