Home > Ask the SQL Server Experts > Tony Bain Questions & Answers > Application not resolving username and password
Ask The SQL Server Expert: Questions & Answers
EMAIL THIS

Application not resolving username and password

Tony Bain EXPERT RESPONSE FROM: Tony Bain

Pose a Question
Other SQL Server Categories
Meet all SQL Server Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 03 September 2003
I am working with a SQL programmer who has created an application running on Windows NT 4.0 running SQL Server 7.0. He claims the product will work on Windows 2000 running SQL Server 2000. Indeed it does, except it does not resolve the username and password of Windows users. It does resolve standard user (SQL authentication). The server is configured to authenticate both SQL and Windows. I've tried changing the configuration to be Windows authentication only. But this did not help. I can connect to the database using tools such as Query Analyzer and Windows Authentication option checked and from client machines where ODBC is resolving username and password with Windows authentication. Am I correct that the problem lies within his programming code? What else would you do to diagnose the problem?

>

If you can connect to SQL Server and access the user database using Query Analyzer from the client machine logged in as the same windows user who executes the application, then you are right, the problem is surrounding the way the application is connecting to SQL Server rather than any general SQL Server authorization set up issue.

Forgive me if I am stating the obvious but it must be cleared up. For the application to use Windows Authentication it must have an option to choose between Windows Authentication or SQL Server Authentication. You do NOT type in the username and password of your Windows User Account into the application to connect to SQL Server using Windows Authentication. You only type in a username and password into an application to use SQL Server Authentication, the Windows Authentication information is based on the user who you are currently logged into Windows as.

For the application to connect to using SQL Server using Windows Authentication it will have to send a different connection string than what it sends when connecting using SQL Server Authentication. Check with your developer to ensure that the correct connection string is being set within the application.

I would also run SQL Server Profiler and trace the "SecurityAudit:Login" and "SecurityAudit:Login Failed" events. From this trace you can see 1) If the application is even trying to connect to SQL Server when the application is using Windows Authentication and 2) If what authorization credentials are being sent to SQL Server.

For More Information


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Tony Bain
Problems trying to install SQL Server on a two-node cluster on SAN
Error connecting to Web-based application
Conversion of char datatype to datetime datatype resulted in an out of range datetime value
Getting error when dropping, inserting into or truncating table with QA
Often used SP wiped out the database
Tony's SQL Server book for DBAs
Finding gaps in column of sequential numbers
Exporting T-SQL scripts from command line
Oracle SQL doesn't work in SQL Server
Recovering the database from the MDF file

SQL Server Security
Meet compliance requirements with improved database security practices
Hardening the network and OS for SQL Server security
Securing the server and database in SQL Server
SQL Server security made simple and sensible
Blog: Protect your databases from the internal threat
Setting up SQL Server Service Broker for secure communication
The keys to database backup protection for SQL Server
Understanding transparent data encryption in SQL Server 2008
The fine line between not encrypting your databases and breach notification
Securing SQL Server with access control, login monitoring and DDL triggers

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
data corruption  (SearchSQLServer.com)
data hiding  (SearchSQLServer.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



SQL Solutions - SQL Database Design
HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2005 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts