Secure Remote Management On Shared SQL Server
I am trying to get my hosting company to provide a way to make secure encrypted connections from my desktop (where I am using Enterprise Manager and Aqua Data Studio) to their shared MS SQL Server.
I've seen some references to SSH, but I don't understand how this works or how the host would implement it. I also read that an SSL certificate can be installed on SQL Server, but it doesn't seem as if EM or ADS can make SSL connections to SQL Server. (In case it makes any difference for either of these solutions, the hosting company has port 1433 open, and will not close it because some clients connect to the DB server from web apps on their own intranets.)
Finally, if a web-based admin is used instead (like phpMyAdmin for MySQL), then which machine is the software installed on? Can it be on a web server that makes a local connection to the DB server or does it have to be on the DB machine? E.g., if I had a VPS or dedicated server at the same hosting company would I be able to install web-based admin software which would then connect to the host's shared SQL Server?
Anyway, my host is giving incomprehensible (to me) objections to all of these ideas. Is there a reasonably simple way to do this on a shared DB server?
View Complete Forum Thread with Replies
Related Forum Messages:
How (un)secure Is My Remote SQL Server?
I've been provided with a server at a hosting company. The server is running W2K3 SP2 in its own workgroup (i.e., non-AD) configuration, but is not behind any type of hardware firewall; there is no VPN in place, either. I connect to the server via RDP using an extremely long and complex password. I'm using the newest version of the RDP client. The article "Hacking RDP" and the ensuing reader comments (http://mcpmag.com/columns/article.asp?EditorialsID=1699) indicate that using RDP in this fashion is relatively safe. I installed SQL Server 2005 SP2 on this server. I set server authentication to 'SQL Server and Windows Authentication mode'. I created one obscure SQL Server login, using another extremely long and complex password. I also disabled the login for the 'sa' account. Since installing SQL Server on this server, I've noticed thousands of Failure Audit events in the server's Application log: Source: MSSQLSERVER Description: Login failed for user X where X equals 'administrator', 'root', 'server', 'database' 'sql', 'sa', etc. These failure events occur almost non-stop, about a dozen per second, and come from a small pool of unknown IP addresses. The IP address seems to change every few hours. I'm guessing that someone is hoping that one of these names is an actual SQL Server login and is trying a brute-force attack to try to stumble upon a matching password. None of these logins are valid, but it's still disconcerting. Is this anything to be concerned about? I could have the hosting company block the IP addresses, but that seems like a losing battle. Lastly, I used the Surface Area Configuration tool to allow local and remote connections, using TCP/IP only--so that I could begin interacting with this SQL Server from my PC, using both SQL Server Management Studio and my own Visual Studio code. For each method, I'm using the obscure SQL Server login that I created earlier--the one with the extremely long and complex password. How (un)secure is my traffic to/from this SQL Server? I don't believe that my credentials are encrypted, but I'm not sure how much of a risk this is nor do I know how else to more securely connect to SQL Server. Given these circumstances, is there any way to make this resource more secure? Thanks!
View Replies !
Secure SQL Server Remote Access From ISV Application
Hi guys I'm writing a C# application which connects to a local SQL database for data access. The application connects to SQL Server through windows authentication, but opens up the port and sqlbrowser to others on the network wanting to access the database through SQL Server authentication, and also allows remote users to connect to this server remotely if they have the login and password (and because the port is already open) I understand this is not secure and open to attack, and am unsure of how to secure these processes without blocking these three types of access, from A.) the local user, B.) the network user and C.) the remote user across the net. Have researched this a fair bit, but get somewhat lost amongst all the jargon.
View Replies !
Full Text Catalog On Remote (shared) Server
Can any one help - my Full text catalog on a remote shared sql server hasdied and i need to recreate it completely - I have done this before but i'velost the code to do it.If I remember right what i did was use start --> run --> to run an exe in themssql folder that connected to the remote server - but i've lost all theparameters I needed for it.ANy help much apprectiated
View Replies !
Problem With Creating Directory By SQL Server On A Remote Shared Folder
Dear all, I now have 2 server, say serverA and serverB. ServerA has a SQL server and I am using a command in the SQL server to access the serverB. The command is: declare @command varchar(500) set @command = 'mkdir ' + '"\serverBabckevin_wong123" exit' exec master.dbo.XYRunProc 'cmd.exe', 'c:', @command where abc is a shared folder in serverB which can be accessed by serverA. However the output of this execution is "c:> mkdir "\serverBabckevin_wong123" Access is denied". It is possible to do this in command prompt. Does anyone know what's the problem of this? Thank you very much!! Kevin
View Replies !
Is Enterprize Manager Secure For Remote Admin?
Hello all, An ASP.NET website hosting service allows the use of Enterprize Manager to manage the backend database of a hosted asp.net website. This is not done across a VPN and I don't think it could be done on SSL so the question is : How Secure is that? would this be ok for learning but not Ecommerce? Or is it an encrypted session and I paranoid? -Thanks Heywade
View Replies !
Remote Management Of Sql Server 2000
One of my clients is upgrading to Sql 2000. I currently administer her server using a SQL 7 interface but I will need to upgrade that interface to sql 8 now to be able to give her the same level of support. How do I go about installing the required clients on my desktop in such a way as to not interfere with my own installation of MSDE? I use Windows NT workstation 4. If I have a choice do I install developer's edition of SQL2000 or personal edition? We also have pcanywhere access but this is too slow and unsure for my money. Thank you, Bo Graham
View Replies !
Remote Management Of A SQL Server 2005
Hello, One thing I noticed is that Network connections to SQL Server 2005 databasees, updates and other thinks like Insert, Delete via remote are never covered, especially for new programmers. You see, new programmers like myself need special attention. The simplest thing is a big thing to the new programmer. This is why I would like to see a Forum or Topic that looks after the new programmer for remotely connecting to SQL Server 2005 from VB.Net or C#. Thanks.
View Replies !
How To Check The Remote Shared Drive?
Hello, everyone: I want to write a query to check a remote shared drive. The shared drive is mapped as T drive in my local. I run the statement, EXEC master.. xp_cmdshell 'DIR C:' It works. If I change to T drive like, EXEC master.. xp_cmdshell 'DIR T:' It dosen't work and returns, "The system cannot find the path specified." But I run DIR T: in DOS prompt, it works. Any help will be great appreciated. Thanks a lot. ZYT
View Replies !
SQL Server Express Database.mdf - Remote Management
Hi, I have installed an ASP.NET 2.0 application which uses a SQL Server Express database file on a client's network. I am able to connect to my client's network remotely over the internet. I would like to know if there's a way - and if so, how - to manage the Database file remotely. I have VWD Express, SQL Server Manager Studio Express and a trial version of SQL Server 2005 on my development machine. Thanks very much. Regards Gary
View Replies !
SQL Server - Remote Command Line Management
As a Sys Admin, I was wondering - if I have admin rights to a Win2k machinethat is hosting SQL Server 2000, do I have the ability using anycommand-line tools such as OSQL or ISQL to add, delete, or change accountsregistered in SQL Server for the various databases if I don't have access toa specific account within SQL Server?I ask, because the question that came up was - what if we have a DBA leaveunder less than amicable circumstances? Could I, someone who has adminrights on the machine, be able to log into that machine remotely and somehowvia command line (I don't maintain active SQL clients centrally), change theSA password, remove an account, and/or add an account with sysadmin rights,etc?Thanks in advance for any help -
View Replies !
Error Connecting To Remote Server Using Microsoft SQL Server Management Studio Express
Dear All, I am trying to connect to a remote sql server 2005. So I have install the Microsoft SQL Server Management Studio Express. When I try to connect I get the error below. An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections. (provider: Named Pipes Provider, error: 40 - Could not open a connection to SQL Server) (Microsoft SQL Server, Error: 53). Can some one please help. I have even port no 1533 on my pc. Thanks.
View Replies !
Remote Management
Hello! My login is dbo for a database located at a remote server(SQL server7.0).Can I run the stored procedures of that database by accessing remotely.Also I have to manage that database from here,what limitations that I will have if I am not an SA for that server?Any help is appreciated.I am operating from NT workstation4.0.
View Replies !
Local Management Studio Cannot Connect To Remote IS
I am not able to connect my local SQL Server Management Studio to a remote server hosting our Integration Services. I get the infamous "Access Denied". I have walked through Kirk Haselden's howto at: http://www.sqljunkies.com/WebLog/knight_reign/archive/2006/01/05/17769.aspx but the problem persists. Thanks for any help. Keehan
View Replies !
Are Packets From .NET To SQL Server Secure?
When I'm getting data from sqlserver using ado.net and a sqldataadapter, are the resultant network traffic packets secure? If I wanted to deploy my objects at a remote site, would I still be safe going straight to my sql server from there or should I build a web service and then auto generate 'remote' versions of my objects that will then communicate to the web service on https? thanks pat
View Replies !
Is It Secure Setting FTP On Server
Is it secure setting ftp on the server so that i can use this ftp task in ssis. I want to get some files located on the sever to my machine. right now it does not work. Is it safe setting ftp on the server???????
View Replies !
Secure SQL Server + IIS 6.0 Setup - System DSN Problem
Greetings all, Please allow me to describe my setup briefly and then I will jump into my problem/questions. I am trying to setup a shared hosting/DB type environment in a secure manner. I have two Windows Server 2003 boxes where Machine 1 is the DB server (MS SQL Server 2005) and Machine 2 is the web server (IIS 6.0). The web server may ultimately have 5-6 different customers (web applications/domains) on it. In order to keep an exploit/poor code in one customer's application from accessing the files of another, the server is being setup so each website instance runs with a different low-privileged domain account (in Domain Guests). For example, for Website 1, the Directory Security will be setup so it runs with DOMAINIUSR_website1 and for Website 2, the Directory Security will be setup so it runs as DOMAINIUSR_website2. Both of these accounts are in the Domain Guests group and no other groups. This was chosen so that the DB used by each websites on the SQL Server could have read/write permissions granted to the appropriate user. On the web server the SYSTEM DSN is setup to access each database. This way if there is a DB setup with permissions for IUSR_website1 and it gets called by IUSR_website2, access will be denied. If I ran each website instance as the same user, they could in theory still called this DSN and access someone else's database. Now here is the problem I get. First, the website access works just fine with it setup as the Domain Guest user account. However, when I go to the called the System DSN for DB access I get this error: --------- Microsoft OLE DB Provider for ODBC Drivers error '80040e4d' [Microsoft][SQL Native Client][SQL Server]Login failed for user ''. The user is not associated with a trusted SQL Server connection. /login.asp, line 7 -------- Line 7 of login.asp is as follows: objConn.Open "DSN=DSN_CTO_SQL" -------- So it appears there is something that is failing here. For troubleshooting purposes I have taken that IUSR_website1 account and placed them into the Domain Users group instead of Domain Guests. This fixes the problem. However, it's not the most secure setup to run the web/SQL stuff as a Domain User. Any ideas on why it works fine if the account is in Domain Users but not with Domain Guests? I even went to the registry key for HKLMSoftwareODBC and gave DOMAINIUSER_website1 specific read permissions. This did not fix the problem. Can anyone make a suggestion or know what the issue is? How are people running secure IIS 6.0 + SQL Server setups for shared environments? Thanks Steven
View Replies !
Secure Report Server Not Authenticating At Deployment
Hi, I am trying to deploy reports to my secure report server. When I attempt to deploy it's not authenticating me and I get an error: TITLE: Microsoft Report Designer ------------------------------ A connection could not be made to the report server https://reports.******.com/ReportServer. ------------------------------ ADDITIONAL INFORMATION: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. (System.Web.Services) ------------------------------ The remote certificate is invalid according to the validation procedure. (System) ------------------------------ BUTTONS: OK ------------------------------ I have checked my certificate and it looks okay. Thanks, Darren
View Replies !
SSRS Reports On A Secure Server (https:)
We currently have a few reports running on a external website. The users have to log in to the website using their Domain Username and Password. Our network admin wants to move from simply http, to a secure https protocol. My question is: Are there any conciderations for making this move? ...Will it break my reports?
View Replies !
How To Secure MSSql Server 2005 ReportServce ?
I have some doughts when i am securing my MsSql Server 2005 report service project, Currently i have secured using windows authentication mode, Now my problem is how to authenticate the users using forms authentication and custom authentication method ? and how do i implement the access rights to the users (authorize the users )? Any idea ? has anybody got any smaple code or article ? thanks regards sujithf
View Replies !
Allowing Secure Connections To SQL Server 2000 Through A Firewall
Hello, My question is about allowing and securing connections to SQL Server 2000 over the internet. The company that I work for has an application server that several of our clients connect to via the internet using secure .NET remoting. Basically, the clients have a desktop application that they run that creates a remoting connection to our server software and we handle the server/database part. Anyway, one of our clients now wants to use Crystal Reports to run ad hoc queries on their data that is hosted on our SQL 2000 database server behind our firewall. Obviously, opening up a port in our firewall and allowing someone to run ad hoc queries on the database makes us all more than a little nervous about security. Has anyone else here had to deal with this sort of situation before? We'd like to set up a secure, encrypted connection for this one client, but still keep it locked down for everyone else. Is it as simple as enabling encryption and generating SSL certificates for the client machine and our server? I've only been able to find a few resources that help with bits and pieces of the problem, never anything tackling the issue as a whole. If anyone has any thoughts, experiences, links, etc. to share it would be greatly appreciated. We are a small company and no one here has experience with this sort of thing. Cheers! Justin
View Replies !
SQL Server 2005 SSIS Script Help - XML Secure Pull
All, Subject : SQL Server 2005 SSIS Script Help - XML Secure Pull in to DB table I was wondering if any of you could help me with something..... I want to design a SSIS script that will pull XML data from a secure HTTP website direct in to a local database table. I have had no training on SQL Server 2005 SSIS. I have a reasonable knowledge of SQL Server 2000 DTS but I believe this had no direct XML integration. I have been told SSIS does have this functionality. I have tried obvious ways of doing this using the controls available but cannot get it to work. Do any of you have any example SSIS packages you could send me that does this? OR if you don't have this could you tell me the steps I might need to take (mentioning controls I need). Are there any VISUAL tutorials that help with this (NOT written ones)? Look forward to your replies. Many thanks, Regards, Richard.
View Replies !
SQL Server Management Express Studio Management Tools
I have recently installed the SQL Server Management Studio Express but I do not find Management Tools in order to create scheduled backups and shrinking of the databases. I was under the impression that this should be included in the Management Studio. I use the SQL 2005 Express for smaller customers who run the SQL on a desktop unit. I need a way to backup the data to a server machine for backup purposes. I have uninstalled and reinstalled to no avail.
View Replies !
Secure A Single SQL Server Database + Make Float Fields Encrypted
Hi all, I am developing an application for a big office which uses SQL Server 2000. Apart from my database, on that server, there are two databases by other companies. The administrator also has access to server but the client only wants him to backup the database. I have two questions: 1) First of all (if it is possible) I would like to protect my own database from the other companies. I don't want them to: see the data in the tables (around 20 tables) make changes to the stored procedures (more than 100 stored procedures) be able to backup the database 2) The client will save sensitive data to the database (mainly currency amounts, salaries etc) which he wants to keep hidden. I am using float type for these fields and I would like to make the data encrypted. I could do it for nvarchar fields but changing these float to nvarchar would be time consuming. Thanks for your patience reading this! Would really appreciate some help on any of these Nicolas
View Replies !
Shared Server Issue?
We've been running a database on a shared server. The traffic on oursite has been picking up steadily and it seems as though we're runninginto sporadic downtime on the database. Sometimes when we do largedata imports, the transaction log fills up and the schema somehowfails to truncate it when asked to back it up. So we run the explicittruncate statement and that usually seems to fix the problem. A fewdays ago a single stored procedure started to block, but inexplicablyonly when called by our .NET server. When called by hand fromEnterprise Manager, it executed fine. I was at my wits end when Ijust recreated it with the same exact code and it magically startedworking again. What gives? Is this at all indicative of a shareddatabase, or are these known SQL Server issues?
View Replies !
Acessing SQL Server Over The Web With Shared IP
I am new to setting up SQL Server and would greatly appreciate ifsomeone can help me out with this issue:I have successfully set up SQL Server but want to be able for clientsof mine to be able to connect to it via the web through enterprisemanager. I have tried everything I could think of to get it to work. Imade sure the correct ports where open in the firewall (1433,1434).Everytime I try to connecting using the IP of the box that the SQLServer resides I get SQL Server does not exist or access denied. Iverified that the login credentials being used for the database I amtrying to correct to are correct. Still the same error message.How I would like to set it up would be to create a subdomain on thebox and point it to SQL Server so that is what would be entered whenregistering the group in enterprise manager.I am currently running all my sites through vhost on a single IP usingIIS 2003. SQL Server is installed on the box where all of the sitesare being served up.Is it impossible to set-up SQL Server to allow connections over theweb when using a Shared IP?I have been researching this for over a week now and hope someone outthere can help me.Thanks in advance!!
View Replies !
Can't See Shared Folder From SQL Server
Hi, I'm trying to restore a backup file to a remote SQL Server. However, when I specify the UNC path I get a message saying that the backup file location cannot be verified. I have tried from other SQL Servers and I get no problem connecting to the shared folder. I have also tried using query analyzer and again it won't work. Can anyone suggest why I can see the shared folder from some SQL Servers and not others. Any help would be very much appreciated. Karl
View Replies !
Using Sql Server 2005 In Shared Pc.
HI, currently two people(with different username and password) are using a shared workstation, where in the sql server is installed. so i just wanted to know that whether two people could use the sql server at the same time. please note that the two people have different username and password to enter to log in. Thanks, Nitin
View Replies !
Assistance In Connecting A SQL Server Client To SQL Server Sitting In A Shared Environment
Hi, I need to connect to a SQL server thats running in say abc.trident.com and also sits in a shared environment.. I have couple of questions 1) That SQL server is accessible from my network, yet when I swtich on my enterprise manager I am unable to view that in the list of running SQL servers in the populated list. Is it because its sitting in a shared environment I am unable to view that? 2) What is the connection striing I should use to connect to the server..When I try to configure a SQL server registrations it normally asks for SQL Server name along with the user authentication Should I mention fill the Server: field as abc.trident.com or // abc.trident.com/abc.trident.com to connect to the clustered server. Can some one tell me the proper connection string if both aforementioned ones are incorrect? Thanks in Advance
View Replies !
Transferring Existing SSIS Packages Saved In A Shared Folder Location From Development Server To Live Server
Please can anybody help me in transferring existing SSIS Packages saved in a shared folder location from development server 2ED to Live server TWD1. Both has SQL server 2005 running and has visual studio 2005 Currently about 25 SSIS packages are executed from the development server transferring data on Live server TWD1...these ETL process is called from development server but executed on live server. Now the problem is when i call these packages from the shared folder from live server it crashes.....i need to changes something to shift the whole package to the live server..and execute on live server itself instead of recreating the whole 25 process from scratch.....also i use optimize for many tables ..and run in a single trancastion....so how can i see the mappings of source and destination tables. Please let me know the process how i can achieve this. Thanks George
View Replies !
Shared Hosting Sql Server Liscence
i am getting ready to build the back end for a client server application, using a shared sql server as a back end. microsoft's white pages don't mention shared hosting. i need to know if anyone else has had problems with lisencing in a shared hosting environment. my web host told me i don't need to liscence my users (who will have read write priveledges), but microsoft gave me the impression that i did. anyone know a clear answer?
View Replies !
Email Facility In Shared SQL Server
Hi, am doing a project with SQL 2005 as backend.my database is in a shared SQL server. i want to know that is it possible to send email through SQL in a a shared server?Plz help me out. thanks in advance, rekha
View Replies !
Transferring From Sql Server Express To Shared Host
I have a web app and database created in sql server 2005 express. In addition to using the membership and role providers I have added custom tables and stored procedures to my db. When I try to export this with Sql Server Management Studio (not the express version) to my db on my shared host(sql server 2005) the custom tables and stored procedures are not transferred. How can this be accomplished? Thanks in advance.
View Replies !
Does SQL Server Put A Shared Lock On All Tables Within A Transaction?
Would table1, table2 and table3 in code below, be locked with a shared lock from start of transaction to the end of transaction Or they would only be locked for the duration of their update, or insert statements and not for the entire transaction? Default isolation level is in effect in SQL Server. begin tran update table1 set column1 = 100 if @ERROR = 0 begin declare @stat int set @stat = (select stat from table2 where employeeid = 10) insert into table3 (col1, col2) values (@stat , 325) if @@ERROR = 0 commit tran else rollback tran end else roll back tran
View Replies !
Client Connection To SQL Server On Shared Hosting
I'd like to do this:Have a SQL Server database hosted on a public facing web server.I want it to be held at an ISP/Web hosting company. Though I have ADSL hereI don't want to manage a server.I want some ASP pages accessing the database.I would also like for a very small number (probably 2) of users to accessthe database from a richer client. Perhaps Access/VB.I've tried using www.shanje.com, as a test. It seems to work, though thereare worries about security.I want to keep cost down!On 'normal' shared MS hosting, would it be possible to connect to the dbfrom a client like Access. The way most web hosts talk it doesn't look likeit.Is there any way of providing a richer client interface than plain webpages? I want things like autocomplete (beyond the first character) for dropdowns, keyboard shortcuts etc.This would be low volume. Essentially a private database held on theinternet.Yours, Jo
View Replies !
Error 22023 In SQL Server "shared Job List"
Can anyone shed any light on the following error meessage when executing a job in SQL 7, please? I cannot find any reference to it in MSDN or Books on line, or even good old swynk.com! --------------------------------- SQLServerAgent exceeded the allowed timeout for creating the shared job list. The Jobs cannot be enumerated. [SQLSTATE 42000] (Error 22023)
View Replies !
Report Server Error For New Shared Schedule
When i am tying to generate a new Shared Schedule in Report server , I am facing the follwing Error ,I could not Find any solution any one pls help me............ The EXECUTE permission was denied on the object 'sp_verify_job_identifiers', database 'msdb', schema 'dbo'. The SELECT permission was denied on the object 'sysjobs', database 'msdb', schema 'dbo'. rgds kousik
View Replies !
32-bit Client Connection Via Shared Memory To 64-bit SQL Server
Hi, Our 32-bit applications connect to SQL Server 32-bit through OLEDB with Shared memory as preferred protocol. Our client applications and SQL Server generally reside on same machine. We are evaluating possible impact when SQL Server 2008 64-bit is accessed with our 32-bit client applications running on 64bit WindowsServer 2008. Can shared memory protocol will be still used by underlying SQL server OLEDB dll considering the client application is 32-bit where as SQL Server is 64-bit ? Or it will switch to Named pipes or TCP/IP automatically ? Thanks prayags
View Replies !
Error In Shared SQL Server Reporting Services
I can run a report successfully through the report manager, but when I click on a prompt in order to change it am getting the error. i.e,Validation of view state mac failed. if this application is hosted by a web Farm or cluster,ensure that <machine key> configuration specifies the same validation key and algorithm. Autogenerate cannot b used in a cluster.
View Replies !
|
TRACKER
