Hi

Lots of discussion on this site re use of <identity impersonate="true"/> in web.config and machine.config.

My question is - is it possible to have impersonation flow through to a remote SQL Server?

Scenario - We have IIS set up on Windows 2003 which has web apps that access SQL server on a separate machine in the same domain.
a. Anonymous access is turned off and integrated security is turned on in IIS
b. <identity impersonate="true"/> is included in each apps web.config file. Note we do NOT want to add a username and password (what's the point? might as well include in the connection string otherwise).

Whenever try to access the web app, we are greeted with "Login Failed for user NT AUTHORITY\ANONYMOUS LOGIN".

IIS log shows that the user is authenticated correctly on the web server. The error message implies (and SQL Servers log confirms) that the impersonation does NOT flow from the web server to the machine housing SQL Server.

My feeling is that it is mission impossible - literature on the web is confusing and conflicting. My guess is that it only works when SQL Server is on the SAME machine as the web server.

Has anyone had experience with this?

Cheers
Brian

I would say this post would fit under a .Net forum here. You should be able to find help from a .Net forum on this site.

Cheers!

_________________________
- Vijay G
Strive for Perfection

It is possible, but it's not very easy to find by.

You need to setup the user on both servers (web & sql) with exactly the same usernames / passwords.

You can ONLY use Basic Authentication. (Sorry But No Windows Authentication)

You'll need to change the Local Security Policy on both servers:
http://support.microsoft.com/?id=840219

In the web.config file you need to set:
 <authentication mode="Windows" />
<identity impersonate="true"/>

Best regards,
Gregory Liénard

@iPower
Toekomstlaan 16i
B-2900 Schoten

Web: http://www.ipower.be

_______________________________________________
    MORE VISITORS WITH A PERMANENT
   TOPPOSITION AT THE SEARCH ENGINES

        http://www.Hit-Magnet.com
_______________________________________________