Impersonation impossible to remote SQL server ??
Hi
Lots of discussion on this site re use of <identity impersonate="true"/> in web.config and machine.config.
My question is - is it possible to have impersonation flow through to a remote SQL Server?
Scenario - We have IIS set up on Windows 2003 which has web apps that access SQL server on a separate machine in the same domain.
a. Anonymous access is turned off and integrated security is turned on in IIS
b. <identity impersonate="true"/> is included in each apps web.config file. Note we do NOT want to add a username and password (what's the point? might as well include in the connection string otherwise).
Whenever try to access the web app, we are greeted with "Login Failed for user NT AUTHORITY\ANONYMOUS LOGIN".
IIS log shows that the user is authenticated correctly on the web server. The error message implies (and SQL Servers log confirms) that the impersonation does NOT flow from the web server to the machine housing SQL Server.
My feeling is that it is mission impossible - literature on the web is confusing and conflicting. My guess is that it only works when SQL Server is on the SAME machine as the web server.
Has anyone had experience with this?
Cheers
Brian
|
