(Cross post from newsgroup) Attempting to implement Windows authentication between trusted domains. . . I have a domain trust set up between two domains connected via persistent vpn:
-A "master domain" AD, a "sub domain" AD, a trust relationship between the two (sub trust master) -A sql server 2005 on a win server 2003 in "sub domain" AD -A linked server to "sub domain" AD -A linked server login using a "sub domain" admin acccount -A view to this linked server -A grant on masterDomain/Domain Users to the database -A grant on subDomain/Domain Users to the database -We want all connections done through "Windows Authentication" not "Database Authentication".
Queries on the view work fine using "sub domain" user accounts. Queries on the view fail using "master domain" user accounts (including master domain admin accounts)
"Msg 7399, Level 16, State 1, Line 1
The OLE DB provider "ADsDSOObject" for linked server "ADSI" reported an error. The provider indicates that the user did not have the permission to perform the operation."
All connections are done through "Windows Authentication" not "Database Authentication".
Can we establish cross domain connectivity with "Windows Authentication" ?
Below are details of the implementation:
SELECT TOP (100) PERCENT * FROM OPENQUERY(ADSI, 'SELECT displayname, givenName, sn, cn (etc...) FROM ''LDAP://OU=PEOPLE,DC=subDomain,DC=com'' WHERE objectCategory = ''Person'' AND objectClass = ''user'' ')
In SQL Server Mngt Studio in Server Objects/Linked Servers/Providers/ ADSI properties security tab I have:
"connections will: <be made using this security context> Remote login:'subDomainAdminAccnt' With password: 'subDomainAdminAccntPassword'
Error: Msg 7399, Level 16, State 1, Line 1
The OLE DB provider "ADsDSOObject" for linked server "ADSI" reported an error. The provider indicates that the user did not have the permission to perform the operation.
Msg 7320, Level 16, State 2, Line 1
Cannot execute the query "SELECT displayname, givenName, sn, cn
FROM 'LDAP://OU=PEOPLE,DC=subDomain,DC=com'
WHERE
objectCategory = 'Person'
AND objectClass = 'user'
" against OLE DB provider "ADsDSOObject" for linked server "ADSI".
We have a local group the consists of users from a trusted domain.. THis is a one way trust, us trusting them.. When I add that local group as a trusted SQL login the users cannot access the database... We have narrowed it down to the security by verifying the user can log in using a test sql account and hit the database.. Any ideas??? IS it possible to map an account to a Local group on the domain or does it have to be a global group????
I am trying to perform an upgrade to 7.0. I have a two-way trusted domain in place. When I try to proceed with through the upgrade wizard I received the following error message:
"unable to connect to the export server.."
Basicly what I have is a SQL 6.5 in DOMAIN A and I created a SQL 7 in DOMAIN B. I want to upgrade the database from DOMAIN A to DOMAIN B. Is it possible to do so or does the SQL 7 needs to be in the same domain as the 6.5?
Thanks for any help. I will take any pointer someone can give me at this point.
1. Two trusted domains(Domain 1 and Domain 2) connected through 128kbps intranet in two different buildings. 2. A Computer(Machine 1) running SQL server 2000 connected with Domain 1. 3. An application which connects to sql server and with its related database on Machine 1. 4. I want to replicate data onto a computer (Machine 2) on Domain 2.so that users of domain 1 and domain 2 can have a synchronize database. And whenever they visit each other in different building they have their data availabe to them.
One of my users gets the following error when he tries to connect to my SQL Server 2000 database using windows authentication via Query Analyzer:
[Micorsoft][ODBC SQL Server Driver][SQL Server] Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection.
Me and the server are located in Colorado and are on the NADomain. User is in London on the EURDomain. The EURDomain has a one way trust to the NADomain to use NADomain resources. I have granted access to the database to the user via Enterpise Manager as EURDomainuserid. All the literature I've read says this should be sufficient to connect but isn't. User can connect with SQL Server authentication. Users on the NADomain in Toronto can connect just fine with Windows Authentication. EURDomain user can access other file server resources in the same building as the SQL Server in Colorado.
SQL Server version is:
Microsoft SQL Server 2000 - 8.00.818 (Intel X86) Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
EURDomain Client ODBC version is 2000.85.1022.00 and MDAC is 2.8.
All -- Please help. I have some questions about connection strings.
BACKGROUND...
Note that I am using the "SQL Native Client OLE DB Provider", SQL Sever 2005 Express, ASP.NET, C#.NET, and VS.NET 2005. Note that I do not want to use the "Attach a database file" type of connection string. Note that I am using the site http://www.ConnectionStrings.com as a reference. Note that this "Standard security" connection string...<add name="LocalSqlServer" connectionString="Server=MYTESTOFFICESERVERS;Database=MyDatabase;Uid=MyDatabaseUser;Pwd=MyDatabasePassword;" />...does not work and causes the following run-time error...A connection was successfully established with the server, but then an error occurred during the login process. (provider: Shared Memory Provider, error: 0 - No process is on the other end of the pipe.) Note that this "Trusted connection" connection string...<add name="LocalSqlServer" connectionString="Server=MYTESTOFFICESERVERS;Database=MyDatabase;Trusted_Connection=yes;" />...works but is less-than ideal because it uses a Trusted Connection rather than a Username/Password combination.
QUESTIONS... (A) What exactly does the error in Item 4 mean? (B) Do 4 and 5 imply that one must use a Trusted_Connection for all SQL Server 2005 Express connection strings when the database does not reside in the web application's App_Data folder or use a "Attach a database file" type of connection string? (C) Are there any alternatives? (D) What do you suggest?
We are using the Windows Task Scheduler as a substitute for the SQL Server Agent, which isn't available in the Express edition. The scheduled task just calls a batch file, which in turn, runs a stored procedure using osql with the -E option for a Trusted Connection.
SQL Server Express has been installed using the defaults, which means the service is running in the "NT AUTHORITYNETWORK SERVICE" account. The scheduled task we create is set to run using the "NT AUTHORITYSYSTEM" account.
Now we find that on Windows Vista (tested using Ultimate Edition) that the scheduled task fails to run the stored procedure until the machine is rebooted the first time after installing SQL Server Express. When I say "fail", I mean that the stored procedure isn't executed. The scheduled task however completes and reports no errors. On Windows XP, we do not run into this problem so I suspect it has something to do with the UAC in Vista?
We further found that after installing SQL Server Express and creating the scheduled task in the "NT AUTHORITYNETWORK SERVICE" account, the scheduled task (and stored procedure) runs fine WITHOUT requiring a reboot.
Can anyone explain why a reboot is needed to get SQL Server Express to run the scheduled task correctly under Windows Vista and the SYSTEM account?
When using jdbc with IntegratedSecurity, I run into this problem when the machine is not part of a domain & gets its IP address via dhcp. Is this expected behavior or a bug in the jdbc driver.
The SQLServer and client application are installed on the same machine and a local admin is logged in, running the client app.
If I change one of the two parameters mentioned above, the connection can be established leading me to believe this may be intentional for security issues. Am I correct?
Hello I've spent close to 3 hours trying to figure this out. I have SQL Server 2000 Developers Version + Service Pack 4 installed on Machine A which is running Windows XP Pro. I have Machine B running XP Pro and Apache 2.0 + PHP 4.40.
SQL Server is configured to SQL Authentication + Windows Authentication.
PHP is configured as follows: ; Use NT authentication when connecting to the server mssql.secure_connection = Off
When trying to connect with either mssql_connect or odbc_connect I get the following error: Quote: odbc_connect(): SQL error: [Microsoft][ODBC SQL Server Driver][SQL Server]Login failed for user 'user'. Reason: Not associated with a trusted SQL Server connection., SQL state 28000 in SQLConnect
I have tried adding a System DSN to MDAC and it can connect no problems to MS SQL. I don't know what to do, I've googled and tried every possible solution and it didn't help.
Is there a way to make SQL accept any connections? I don't care if its insecure I just need it for several days to develope a small application.
Here is the sample code I'm using to test the connection:
have a an sbs 2k3 domain network with sql server 205 installed on the sbs2k3 machine and clients on the network has sql express edition. i recently installed another server outside the domain for my webserver which is directly connected to the router of which is the same router where the sbs2k3 is connected too. i installed an sql server 2005 on the webserver..
my question is, how do my clients on the sbs2k3 network be able to connect to my webserver?
Doing webforms in ASP.NET and i have a connection string in the webconfig that connects to a locally created SQL Server user account.
This is fine however when i try to connect to a domain account created by the IT administrator for me, it wont work.
The User name and password he supplied are correct as i logged into my PC (Win 2000) using it to test it. However when i try to connect to this remote network domain account by changing my connection string it fails... anyone any ideas, or am i missing a subtlety of ASP.NET and SQL connectionstrings?
Heres the connection string that works... ConnectionString = value="Server=MY-SERVER;Network Library=DBMSSOCN;Initial Catalog=MYDATABASE2;User ID=MrLocalUser;Password=password;"
Heres the connection string that fails... ConnectionString = value="Server=MY-SERVER;Network Library=DBMSSOCN;Initial Catalog=MYDATABASE2;User ID=DOMAINMrDomainUser;Password=password;"
Hi all,it happen to me a strange problem:i have a mdb file (in Access 2K) with SQL Server 2K linked tables whoruns on a workstation which is on a different domain that the SQLServer. It works.If i create a mdb file from a workstation which is a the domain of theSQL Server and then i run it a my non-domain workstation i have errormessage:Login failed for user '(null)'. Reason: Not associated with a trustedSQL Server connectionBut if i reattached my tables it works.If someone have an idea....PS: same ODBC on both machines
I have a Web application in asp.net 1.1Iam using windows authentication. The application is on IIS on MachineA. When i try to access this from MachineB as http://MachineA/test/test.aspx, it gives me the error "login failed for user 'null' : not associated with a trusted sql connection"Both MachineA and MachineB are on the same domain & iam not using any sql authentication. Could someone suggest me where i might have gone wrong. Web.config has authentication as 'windows', allow users = "*" and Identity impersonation = trueOn IIS, the vitual directory of 'test' application has Directory secuirty set to 'Integrated Security'Please let me know if someone had dealt with similar scenario. Thanks.
I have just installed MSSQL 2000 on Windows 2000. what I am finding is that I cannot open an isql (or query analyzer) session using the sql login (i am successful when i use NT authentication). The error message I get is as follows
Msg 18452, Level 14, State 1: Login failed for user 'xxx'. Reason: Not associated with a trusted SQL Server connection. DB-Library: Login incorrect.
MSDN talks about setting the registry entries differently, but that seems to be only for SQL 7.
Can anyone please tell me how to create a trusted connection?. I am from Unix world and NT is still kind of new to me. Let say my SQL server is located in this machine residing in domain X and I want a NT user, ABC, who is in domain Y to have acess to my server. What do I need to do?. Many thanks.
What does it mean when a users is connected but it is a "non-trusted connection". This is showing up in the log file after my users connect. How does this effect the system/user? We have been experiencing speed issues and I was wondering if this might be a possible source of the problem.
Hi-Is it possible to do a trusted connection for a web server not onthe same physical machine. By this I mean can I make a remoteconnection from a web server to a sql server using a trusted connection.If so, how?Thanks,Dave
I'm trying to get a utility to run, and it's insisting on a user or trusted connection. I'm using SQL Server 2000 running locally. I've tried every login name, default, user I can think of but it rejects all of them.
I have an application we use here at work that I wanted to bring home to work from my house. At work I can get the application to connect to the SQL Server without problems. At home I get:
Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection.
I am connected to the office using a VPN connection. I have permissions to access the database (I am the server admin). It only happens when I connect thru VPN. I have tried it on 2 other systems here in the house to insure its not just my computer.
At the moment the application will only work with a trusted connection or Windows Authentication. It will not work with SQL authentication.
Hello, I appologize if this is in the wrong spot, but it seemed like the appropriate place. We have IIS installed on one box and SQL on another. We use a trusted connection to connect. When we try an connect to our DB, we don't get an error, the page just refreshes. From what i have gathered, it looks like we are not being authenticated. We have the ASPNET domain user on both boxes and its configured with the correct permissions, but we still can't connect. Do i need to set up or give permissions to another account i dont know about, or is there some file that needs access?
Hi folks, when i try to connect to my sql express sever through Sql sever authentication I keep getting an error that says "Login failed for user 'username'. The user is not associated with a trusted SQL Server connection. " I know the password is right.. how do i overcome this??
Hello All, I know this issue has been dealt with every where in the universe. but none seem to solve my problem. I need help desperatelyThe Web Application is a Classic ASP/Sql Server 2000 using two computers in the same physical network:Computer-A is the Sql Server2000 running Windows XP Professional.Inside Sql Server2000 i created a login, AA, as a dbowner of a database called XXX. Inside XXX, AA is right there as a user. i configured the SqlServer to accept mixed (Windows and Sql) logins.I restarted the computer and i logged into sqlserver successfully as AA. Everything is fine here.
Computer-B is the Web Server running IIS in Windows XP Professional.Here, I successfully created a System ODBC i named EEEE to connect to XXX using the AA login. Everything is fine up to this point.But, to my greatest surprise when i use - conn.Open("DSN=EEEE;UID=AA;PWD=AApassword;") in a classic ASP page, it returns this very famous error.
Hi All, My Webserver and SQL Server are of different machines.I have connected my website with sql server database. I published that website in IIS. I can able to browse that in local machine. But, if I try to browse from some other machine its giving me error saying "NOT ASSOCIATED WITH TRUSTED SQL SERVER CONNECTION". MY Connection string is this: connectionString="Data Source=BOOKSQL;Initial Catalog=CustomerDb;Trusted_Connection=True;" I also tried with connectionString="Data Source=BOOKSQL;Initial Catalog=HeCustomerDb;Integrated Security=SSPI;" How can I overcome this problem. Please help me! I need ur immediate response.
I am trying to use a trusted connect to connect to a DB. Currently I use this code:
WindowsPrincipal wp = (WindowsPrincipal)HttpContext.Current.User; WindowsIdentity id = (WindowsIdentity)wp.Identity;
// impersonate user to connect to DB WindowsImpersonationContext impersonatedUser = id.Impersonate(); try { connection = new SqlConnection("Integrated Security=SSPI;Persist Security Info=False;Initial Catalog=DBname;Data Source=server;Packet Size=4096;"); dataAdapter = new SqlDataAdapter("select query"); data = new DataSet(); connection.Open(); dataAdapter.Fill(data); connection.Close(); } finally { // restore our old security context impersonatedUser.Undo(); }
I am testing the app with my user which has full access to the server and database I am trying to connect to. But I always get this error:
Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection.
Now I'm new to this and not sure if I am going about it correctly, so any help would be appreciated. I just want it to use the ID of the person viewing the page to login to the server.
Login failed for user 'ASPNET'. Reason: Not associated with a trusted SQL Server connection. -~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
Hi, Iam getting the following error when trying to connect to a database on the remote server using asp.net web form "Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection." can anybody tell me what could be the exact reason for this. Regards Adonis