11059

WCF Impersonation and SQL trusted connections?

We have a service that is hosted under IIS7. The connection string for the SQL server is set to Trusted. In order for the authentication to happen I need to setup impersonation on the service and have the client initiate an impersonated connection.

Is there a way to not have impersonation set and still allow the service to log into the SQL server, via the trusted connection? We want to avoid having the clients log into the service. We are not sure what they will be using as a proxy. I would think it is more of a service level agreement with the SQL server rather than the client to the service to the SQL server.

Any thoughts?

Thanks

Answer1:

If you use a domain account to run the Application Pool that the service is running under, you can grant that account access to the SQL server. In this case, only the account that is running the app pool will need to have rights.

Recommend

  • System.DirectoryServices.AccountManagement not working on the server
  • System.UnauthorizedAccessException on IIS7.5, full control everywhere
  • svn commit without -m
  • HBase with Kerberos - keep a HTable instance open more than 10 hours
  • Can a bootstrap carousel rotate through only some of the slides?
  • Async NSURLConnection and keep-alive
  • Create Elevation profile from polyline coordinate array
  • jQuery trigger only occurs first time
  • IRC related help
  • Upload large files 100mb+ to Sharepoint 2010 via c# Web Service
  • Why MongoDB is Consistent not available and Cassandra is Available not consistent?
  • Access a shared folder(which is protected)
  • Bootstrap tooltip stops working after any other event runs
  • Is it possible to run a playbook in “pull mode”?
  • Dynamically Impersonate a remote user - c# and asp.net
  • Confused about how to update my datasources on my UITableView after app has been released
  • matlab crashes without dump file when using fopen for file
  • Prevent page break in text block with iText, XMLWorker
  • Python 3.2.2, error(scripts to exe)
  • Problem with Django using Apache2 (mod_wsgi), Occassionally is “unable to import from module” for no
  • NSIS decompiler
  • How to make R's read_csv2() recognise the text characters properly
  • Suppressing passwd when calling sqlplus from shell script
  • Authentication in Play! and RestEasy
  • Jenkins: FATAL: Could not initialize class hudson.util.ProcessTree$UnixReflection
  • Problem while Building a Setup Project for a windows Service?
  • Abort upload large uploads after reading headers
  • Record samples being played with OpenAL
  • Breeze - Deleted Items nav properties bug
  • Handling un-mapped Rest path
  • CSS Linear-gradient formatting issue accross different browsers
  • PHP - How to update data to MySQL when click a radio button
  • javaw.exe and eclipse startup problems
  • Apache 2.4 and php-fpm does not trigger apache http basic auth for php pages
  • How to recover from a Spring Social ExpiredAuthorizationException
  • AngularJs get employee from factory
  • Rails 2: use form_for to build a form covering multiple objects of the same class
  • Proper way to use connect-multiparty with express.js?
  • -fvisibility=hidden not passed by compiler for Debug builds
  • need help with bizarre java.net.HttpURLConnection behavior