Thursday, February 16, 2012
Accessing SQL Server with Integrated Security from VPN
definitive answer to this question and I have not found a definitive answer.
I have a non-domain computer accessing a domain using VPN. The Domain user
account being used for VPN has administrative priviledges on a SQL server.
Can I use Enterprise Manager to administer the SQL Server from that
non-domain computer using intergrated security? If so how?
Thanks,
David Rogers
Hi David,
So, you should be able to VPN into your corporate network from a machine
at home, that is not part of the domain.
The VPN should challenge you for domain authentication. So, you should be
forced to login to your company domain.
Now, that you've validated your credentials, you could use Terminal Server
or Remote Desktop to your SQL Server,
and it would be as if you're sitting at the console.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.
|||That is helpful. I'm still looking for more. Is there a way to use integrated
security for a connection in this scenario (the question applies to
application connection strings as well as administration tools)?
Looking around, I found a reference to being able to use integrated security
with VPN if the client computer was a member of the same domain OR if the
same login name and password was used on the client. I've had no luck with
the latter.
Thank you!
David
"Kevin McDonnell [MSFT]" wrote:
> Hi David,
> So, you should be able to VPN into your corporate network from a machine
> at home, that is not part of the domain.
> The VPN should challenge you for domain authentication. So, you should be
> forced to login to your company domain.
> Now, that you've validated your credentials, you could use Terminal Server
> or Remote Desktop to your SQL Server,
> and it would be as if you're sitting at the console.
> Thanks,
> Kevin McDonnell
> Microsoft Corporation
> This posting is provided AS IS with no warranties, and confers no rights.
>
>
|||Previous Post:
Is there a way to use integrated
security for a connection in this scenario (the question applies to
application connection strings as well as administration tools)?
-- Integrated Security relies on :
1. user has logged into the domain and been authenticated. (it's the user
not the machine that matters)
2. user has not logged into the domain but his username & password EXACTLY
match
the username and password on the server. Also only works with Named Pipes.
This was
commonly referred to as "workgroup security".
Looking around, I found a reference to being able to use integrated
security
with VPN if the client computer was a member of the same domain OR if the
same login name and password was used on the client. I've had no luck with
the latter.
-- Try this outside of the VPN scenario. Put a SQL Server and client
machine in a workgroup.
Set the Security Audit logging to log successful and failed logins.
Duplicate the username & password on the client and server.
Test with Trusted Connections using Named Pipes.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.
Accessing SQL Server through VPN
(a minimum 4Mbit connection) we have applications we want to run that
directly interact with SQL Server and depend on SQLDMO to enumerate server
listings... I can connect to servers in enterprise manager by using their
name or IP's but it will not give me a list of servers on the network from
the VPN Client end... because of this the applications that depend on SQLDMO
also are not working because they enumerate the servers through SQLDMO, and
they return a blank list... is there any way to get SQLDMO to work so we can
get a server list back?
Our network is
Windows 2003 SP1 standard servers with ISA 2004 SP1... All Internal ports
are fowarded to the VPN with no exceptions or filters on them.
Are you authenticated fully through your VPN connection? I am curious
if this has to do with the domain your home PC may/may not be a part of.
Shahryar
Brian Henry wrote:
>We have a VPN set up and want to be able to work with SQL Server from home
>(a minimum 4Mbit connection) we have applications we want to run that
>directly interact with SQL Server and depend on SQLDMO to enumerate server
>listings... I can connect to servers in enterprise manager by using their
>name or IP's but it will not give me a list of servers on the network from
>the VPN Client end... because of this the applications that depend on SQLDMO
>also are not working because they enumerate the servers through SQLDMO, and
>they return a blank list... is there any way to get SQLDMO to work so we can
>get a server list back?
>Our network is
>Windows 2003 SP1 standard servers with ISA 2004 SP1... All Internal ports
>are fowarded to the VPN with no exceptions or filters on them.
>
>
Shahryar G. Hashemi | Sr. DBA Consultant
InfoSpace, Inc.
601 108th Ave NE | Suite 1200 | Bellevue, WA 98004 USA
Mobile +1 206.459.6203 | Office +1 425.201.8853 | Fax +1 425.201.6150
shashem@.infospace.com | www.infospaceinc.com
This e-mail and any attachments may contain confidential information that is legally privileged. The information is solely for the use of the intended recipient(s); any disclosure, copying, distribution, or other use of this information is strictly prohi
bited. If you have received this e-mail in error, please notify the sender by return e-mail and delete this message. Thank you.
|||All we are doing is the VPN authentication... user name, domain and password
over an IPSec VPN Connection
|||Hi Brian,
I understood the scenario as:
1. You could connect to the SQL Server via Enterprise Manager or Query
Analzyer
2. But if you want to select all the SQL instances in the LAN, you will get
blank information
3. You are connecting with VPN.
If I have misunderstood your concern, please feel free to point it out.
Please download ListSQLSvr.exe and execute to see whether ListSQLSvr will
generate all the instances information in your LAN.
ListSQLSvr.exe - Enumerate SQL Servers
http://www.sqldev.net/misc/ListSQLSvr.htm
If it does get all the SQL instances information, I believe you should
check your custom SQL- DMO application.
Also, please confirm you have SQL-DMO installed on your client.
Thank you for your patience and cooperation. If you have any questions or
concerns, don't hesitate to let me know. We are always here to be of
assistance!
Sincerely yours,
Michael Cheng
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.
|||nothing is listed when ran... enterprise manager does not even see the
servers when ran over the VPN client side computer, but they show up when
ran on the internal network...
"Michael Cheng [MSFT]" <v-mingqc@.online.microsoft.com> wrote in message
news:SpqmWpt1FHA.3276@.TK2MSFTNGXA01.phx.gbl...
> Hi Brian,
> I understood the scenario as:
> 1. You could connect to the SQL Server via Enterprise Manager or Query
> Analzyer
> 2. But if you want to select all the SQL instances in the LAN, you will
> get
> blank information
> 3. You are connecting with VPN.
> If I have misunderstood your concern, please feel free to point it out.
> Please download ListSQLSvr.exe and execute to see whether ListSQLSvr will
> generate all the instances information in your LAN.
> ListSQLSvr.exe - Enumerate SQL Servers
> http://www.sqldev.net/misc/ListSQLSvr.htm
> If it does get all the SQL instances information, I believe you should
> check your custom SQL- DMO application.
> Also, please confirm you have SQL-DMO installed on your client.
> Thank you for your patience and cooperation. If you have any questions or
> concerns, don't hesitate to let me know. We are always here to be of
> assistance!
>
> Sincerely yours,
> Michael Cheng
> Microsoft Online Partner Support
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
|||Hi Brian,
Thanks for the follow up.
Microsoft OLEDB Provider for SQL Server (SQLOLEDB) uses the following two
methods to enumerate all the existing servers on the particular subnet:
- Method 1: SQLOLEDB calls NetServerEnum API to enumerate all the SQL
Server instances on the particular subnet.
- Method 2: SQLOLEDB sends a UDP packet to enumerate all the SQL Server
2000 instances on the particular subnet.
By using SQL Server Distributed Management Objects (SQLDMO), all running
SQL Servers on a local network segment can be listed.
Since you are using VPN, would you please check if machines in VPN are in
the same subnet as that of SQL servers in LAN. Also, please confirm that
you can browse Entire network properly from VPN machines.
326362 Fix: UDL Dialog for SQL Server OLE DB Provider Generates Empty Server
http://support.microsoft.com/?id=326362
287737 INF: How to Enumerate Available SQL Servers Using SQLDMO
http://support.microsoft.com/?id=287737
If your VPN machine is in the different subnet, I am afraid it is not
possible for us to enumerate all the SQL Server instances.
Thank you for your patience and cooperation. If you have any questions or
concerns, don't hesitate to let me know. We are always here to be of
assistance!
Sincerely yours,
Michael Cheng
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.
Accessing SQL Server through VPN
(a minimum 4Mbit connection) we have applications we want to run that
directly interact with SQL Server and depend on SQLDMO to enumerate server
listings... I can connect to servers in enterprise manager by using their
name or IP's but it will not give me a list of servers on the network from
the VPN Client end... because of this the applications that depend on SQLDMO
also are not working because they enumerate the servers through SQLDMO, and
they return a blank list... is there any way to get SQLDMO to work so we can
get a server list back?
Our network is
Windows 2003 SP1 standard servers with ISA 2004 SP1... All Internal ports
are fowarded to the VPN with no exceptions or filters on them.Are you authenticated fully through your VPN connection? I am curious
if this has to do with the domain your home PC may/may not be a part of.
Shahryar
Brian Henry wrote:
>We have a VPN set up and want to be able to work with SQL Server from home
>(a minimum 4Mbit connection) we have applications we want to run that
>directly interact with SQL Server and depend on SQLDMO to enumerate server
>listings... I can connect to servers in enterprise manager by using their
>name or IP's but it will not give me a list of servers on the network from
>the VPN Client end... because of this the applications that depend on SQLDMO
>also are not working because they enumerate the servers through SQLDMO, and
>they return a blank list... is there any way to get SQLDMO to work so we can
>get a server list back?
>Our network is
>Windows 2003 SP1 standard servers with ISA 2004 SP1... All Internal ports
>are fowarded to the VPN with no exceptions or filters on them.
>
>
Shahryar G. Hashemi | Sr. DBA Consultant
InfoSpace, Inc.
601 108th Ave NE | Suite 1200 | Bellevue, WA 98004 USA
Mobile +1 206.459.6203 | Office +1 425.201.8853 | Fax +1 425.201.6150
shashem@.infospace.com | www.infospaceinc.com
This e-mail and any attachments may contain confidential information that is legally privileged. The information is solely for the use of the intended recipient(s); any disclosure, copying, distribution, or other use of this information is strictly prohibited. If you have received this e-mail in error, please notify the sender by return e-mail and delete this message. Thank you.|||All we are doing is the VPN authentication... user name, domain and password
over an IPSec VPN Connection|||Hi Brian,
I understood the scenario as:
1. You could connect to the SQL Server via Enterprise Manager or Query
Analzyer
2. But if you want to select all the SQL instances in the LAN, you will get
blank information
3. You are connecting with VPN.
If I have misunderstood your concern, please feel free to point it out.
Please download ListSQLSvr.exe and execute to see whether ListSQLSvr will
generate all the instances information in your LAN.
ListSQLSvr.exe - Enumerate SQL Servers
http://www.sqldev.net/misc/ListSQLSvr.htm
If it does get all the SQL instances information, I believe you should
check your custom SQL- DMO application.
Also, please confirm you have SQL-DMO installed on your client.
Thank you for your patience and cooperation. If you have any questions or
concerns, don't hesitate to let me know. We are always here to be of
assistance!
Sincerely yours,
Michael Cheng
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================This posting is provided "AS IS" with no warranties, and confers no rights.|||nothing is listed when ran... enterprise manager does not even see the
servers when ran over the VPN client side computer, but they show up when
ran on the internal network...
"Michael Cheng [MSFT]" <v-mingqc@.online.microsoft.com> wrote in message
news:SpqmWpt1FHA.3276@.TK2MSFTNGXA01.phx.gbl...
> Hi Brian,
> I understood the scenario as:
> 1. You could connect to the SQL Server via Enterprise Manager or Query
> Analzyer
> 2. But if you want to select all the SQL instances in the LAN, you will
> get
> blank information
> 3. You are connecting with VPN.
> If I have misunderstood your concern, please feel free to point it out.
> Please download ListSQLSvr.exe and execute to see whether ListSQLSvr will
> generate all the instances information in your LAN.
> ListSQLSvr.exe - Enumerate SQL Servers
> http://www.sqldev.net/misc/ListSQLSvr.htm
> If it does get all the SQL instances information, I believe you should
> check your custom SQL- DMO application.
> Also, please confirm you have SQL-DMO installed on your client.
> Thank you for your patience and cooperation. If you have any questions or
> concerns, don't hesitate to let me know. We are always here to be of
> assistance!
>
> Sincerely yours,
> Michael Cheng
> Microsoft Online Partner Support
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>|||Hi Brian,
Thanks for the follow up.
Microsoft OLEDB Provider for SQL Server (SQLOLEDB) uses the following two
methods to enumerate all the existing servers on the particular subnet:
- Method 1: SQLOLEDB calls NetServerEnum API to enumerate all the SQL
Server instances on the particular subnet.
- Method 2: SQLOLEDB sends a UDP packet to enumerate all the SQL Server
2000 instances on the particular subnet.
By using SQL Server Distributed Management Objects (SQLDMO), all running
SQL Servers on a local network segment can be listed.
Since you are using VPN, would you please check if machines in VPN are in
the same subnet as that of SQL servers in LAN. Also, please confirm that
you can browse Entire network properly from VPN machines.
326362 Fix: UDL Dialog for SQL Server OLE DB Provider Generates Empty Server
http://support.microsoft.com/?id=326362
287737 INF: How to Enumerate Available SQL Servers Using SQLDMO
http://support.microsoft.com/?id=287737
If your VPN machine is in the different subnet, I am afraid it is not
possible for us to enumerate all the SQL Server instances.
Thank you for your patience and cooperation. If you have any questions or
concerns, don't hesitate to let me know. We are always here to be of
assistance!
Sincerely yours,
Michael Cheng
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================This posting is provided "AS IS" with no warranties, and confers no rights.
Accessing SQL Server through VPN
(a minimum 4Mbit connection) we have applications we want to run that
directly interact with SQL Server and depend on SQLDMO to enumerate server
listings... I can connect to servers in enterprise manager by using their
name or IP's but it will not give me a list of servers on the network from
the VPN Client end... because of this the applications that depend on SQLDMO
also are not working because they enumerate the servers through SQLDMO, and
they return a blank list... is there any way to get SQLDMO to work so we can
get a server list back?
Our network is
Windows 2003 SP1 standard servers with ISA 2004 SP1... All Internal ports
are fowarded to the VPN with no exceptions or filters on them.Are you authenticated fully through your VPN connection? I am curious
if this has to do with the domain your home PC may/may not be a part of.
Shahryar
Brian Henry wrote:
>We have a VPN set up and want to be able to work with SQL Server from home
>(a minimum 4Mbit connection) we have applications we want to run that
>directly interact with SQL Server and depend on SQLDMO to enumerate server
>listings... I can connect to servers in enterprise manager by using their
>name or IP's but it will not give me a list of servers on the network from
>the VPN Client end... because of this the applications that depend on SQLDM
O
>also are not working because they enumerate the servers through SQLDMO, and
>they return a blank list... is there any way to get SQLDMO to work so we ca
n
>get a server list back?
>Our network is
>Windows 2003 SP1 standard servers with ISA 2004 SP1... All Internal ports
>are fowarded to the VPN with no exceptions or filters on them.
>
>
Shahryar G. Hashemi | Sr. DBA Consultant
InfoSpace, Inc.
601 108th Ave NE | Suite 1200 | Bellevue, WA 98004 USA
Mobile +1 206.459.6203 | Office +1 425.201.8853 | Fax +1 425.201.6150
shashem@.infospace.com | www.infospaceinc.com
This e-mail and any attachments may contain confidential information that is
legally privileged. The information is solely for the use of the intended
recipient(s); any disclosure, copying, distribution, or other use of this in
formation is strictly prohi
bited. If you have received this e-mail in error, please notify the sender
by return e-mail and delete this message. Thank you.|||All we are doing is the VPN authentication... user name, domain and password
over an IPSec VPN Connection|||Hi Brian,
I understood the scenario as:
1. You could connect to the SQL Server via Enterprise Manager or Query
Analzyer
2. But if you want to select all the SQL instances in the LAN, you will get
blank information
3. You are connecting with VPN.
If I have misunderstood your concern, please feel free to point it out.
Please download ListSQLSvr.exe and execute to see whether ListSQLSvr will
generate all the instances information in your LAN.
ListSQLSvr.exe - Enumerate SQL Servers
http://www.sqldev.net/misc/ListSQLSvr.htm
If it does get all the SQL instances information, I believe you should
check your custom SQL- DMO application.
Also, please confirm you have SQL-DMO installed on your client.
Thank you for your patience and cooperation. If you have any questions or
concerns, don't hesitate to let me know. We are always here to be of
assistance!
Sincerely yours,
Michael Cheng
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
=============
This posting is provided "AS IS" with no warranties, and confers no rights.|||nothing is listed when ran... enterprise manager does not even see the
servers when ran over the VPN client side computer, but they show up when
ran on the internal network...
"Michael Cheng [MSFT]" <v-mingqc@.online.microsoft.com> wrote in message
news:SpqmWpt1FHA.3276@.TK2MSFTNGXA01.phx.gbl...
> Hi Brian,
> I understood the scenario as:
> 1. You could connect to the SQL Server via Enterprise Manager or Query
> Analzyer
> 2. But if you want to select all the SQL instances in the LAN, you will
> get
> blank information
> 3. You are connecting with VPN.
> If I have misunderstood your concern, please feel free to point it out.
> Please download ListSQLSvr.exe and execute to see whether ListSQLSvr will
> generate all the instances information in your LAN.
> ListSQLSvr.exe - Enumerate SQL Servers
> http://www.sqldev.net/misc/ListSQLSvr.htm
> If it does get all the SQL instances information, I believe you should
> check your custom SQL- DMO application.
> Also, please confirm you have SQL-DMO installed on your client.
> Thank you for your patience and cooperation. If you have any questions or
> concerns, don't hesitate to let me know. We are always here to be of
> assistance!
>
> Sincerely yours,
> Michael Cheng
> Microsoft Online Partner Support
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ========================================
=============
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>|||Hi Brian,
Thanks for the follow up.
Microsoft OLEDB Provider for SQL Server (SQLOLEDB) uses the following two
methods to enumerate all the existing servers on the particular subnet:
- Method 1: SQLOLEDB calls NetServerEnum API to enumerate all the SQL
Server instances on the particular subnet.
- Method 2: SQLOLEDB sends a UDP packet to enumerate all the SQL Server
2000 instances on the particular subnet.
By using SQL Server Distributed Management Objects (SQLDMO), all running
SQL Servers on a local network segment can be listed.
Since you are using VPN, would you please check if machines in VPN are in
the same subnet as that of SQL servers in LAN. Also, please confirm that
you can browse Entire network properly from VPN machines.
326362 Fix: UDL Dialog for SQL Server OLE DB Provider Generates Empty Server
http://support.microsoft.com/?id=326362
287737 INF: How to Enumerate Available SQL Servers Using SQLDMO
http://support.microsoft.com/?id=287737
If your VPN machine is in the different subnet, I am afraid it is not
possible for us to enumerate all the SQL Server instances.
Thank you for your patience and cooperation. If you have any questions or
concerns, don't hesitate to let me know. We are always here to be of
assistance!
Sincerely yours,
Michael Cheng
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
=============
This posting is provided "AS IS" with no warranties, and confers no rights.
Monday, February 13, 2012
Accessing Reports Once Deployed?
I have created several reports in SRS and I deploy them by establishing a VPN connection than deploying. That much works fine.
Now I want to allow user of my website to access the reports by clicking on a link. Do I need to establish user level access for the reports for each user or just one public access account? How do I pass login and credential information with the link so that users can access the report.
Thanks in advance
Hi there,
Reporting Services uses AD out of the box. You can add individual user accounts or groups to the Report Manager as browsers or content managers.
If you are using SOAP access you can pass the credentials in from code, otherwise they'll have to type their info in.
If you want to use forms based or custom security, it is a bit complex but can be done.
Here's a link to more info.
http://msdn2.microsoft.com/en-us/library/aa274428(SQL.80).aspx
cheers,
Andrew
|||Thanks for the link. I think that is the clue I needed