> Some of our CF programs are generating this SQL error.
> 
> [Macromedia][SQLServer JDBC Driver][SQLServer]Login failed 
> for user 'sa'
> 
> Any ideas pls?

First, you should NEVER EVER use the sa account from an application, or for
any purpose other than database management. Ideally, you'd use it just to
create other administrative accounts, and use those for database management,
and never use the sa account again. If you're not the DBA, you should not
even know the sa password.

Second, this could indicate that the password has been changed for the sa
account. If that's the case, you should identify who changed it (if it was
changed legitimately) and thank them for identifying the gaping security
hole in your applications. Then, ask the DBA to create an account that has
the correct level of access for your applications. Typically, this account
can simply be added to the db_datareader and db_datawriter roles. If you
can't identify who changed the password, it may have been changed
illegitimately through one of your applications, although that's fairly
unlikely - an attacker isn't going to let you know they have the keys to the
kingdom, because they might then lose their access.

Third, your database server may have been configured to no longer allow
untrusted connections/native SQL logins. In that case, you'll need to
reconfigure the database server to allow them again, or configure your
datasources to support trusted connections/Windows authentication. The
DataDirect drivers do support this, but I haven't tried to use it myself.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309078
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to