Passing NT Username and Password to SQL Server datasource - still impossible or have things changed?
I've been trying to pass with CF8 on a Windows Server 2008 box to SQL Server 2005 on a separate server. The references I've been seeing for previous versions say it can only pass the username and password of the account the CF8 service runs under. Kerberos references say it could be possible with the proper setup. Is it still impossible? Has it been done, and how? Thank you. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:332631 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Passing NT Username and Password to SQL Server datasource - still impossible or have things changed?
Do you mean using Windows Authentication, where the client automatically passes the credentials it has logged into the domain controller with? As far as I know that still can't be done but I'm not sure why. Is there are particular reason you can't create a SQL account for CF to connect with? I actually like that because it makes it a bit easier to audit permissions with explicit accounts. ~Brad - Original Message - From: Thomas Harper harpe...@upmc.edu To: cf-talk cf-talk@houseoffusion.com Sent: Tuesday, April 06, 2010 7:26 AM Subject: Passing NT Username and Password to SQL Server datasource - still impossible or have things changed? I've been trying to pass with CF8 on a Windows Server 2008 box to SQL Server 2005 on a separate server. The references I've been seeing for previous versions say it can only pass the username and password of the account the CF8 service runs under. Kerberos references say it could be possible with the proper setup. Is it still impossible? Has it been done, and how? Thank you. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:332636 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Passing NT Username and Password to SQL Server datasource - still impossible or have things changed?
cfNTauthenticate will pass NT authentication but you will need to have the user authenticate twice; once when they login to the machine and again per coldfusion application. http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=Tags_m-o_07.html ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:332642 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Passing NT Username and Password to SQL Server datasource - still impossible or have things changed?
why did I say twice? The user needs to be part of a registered domain and that's all. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:332643 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Passing NT Username and Password to SQL Server datasource - still impossible or have things changed?
Do you mean using Windows Authentication, where the client automatically passes the credentials it has logged into the domain controller with? As far as I know that still can't be done but I'm not sure why. Is there are particular reason you can't create a SQL account for CF to connect with? I actually like that because it makes it a bit easier to audit permissions with explicit accounts. Yes. We can use a SQL login, but for our auditing purposes we want something that is automatic and assured that the username will be entered in by the system and not just our code. If we have to, we can use CGI.AUTH_USER and tack it onto each query into a separate column if it can't happen automatically, or some other kind of system that'll meet their requirements. cfNTauthenticate will pass NT authentication but you will need to have the user authenticate twice; once when they login to the machine and again per coldfusion application. Right. Unfortunately, our domain is its own server that we're not going to have access to, so that option is closed to us. Thanks for your help! ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:332652 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: Passing NT Username and Password to SQL Server datasource - still impossible or have things changed?
cfNTauthenticate will pass NT authentication but you will need to have the user authenticate twice; once when they login to the machine and again per coldfusion application. http://livedocs.adobe.com/coldfusion/8/htmldocs/help.html?content=Tags_m-o_07.html To the best of my knowledge, this will not allow CF to pass that user's credentials to the database server, though. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ http://training.figleaf.com/ Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on GSA Schedule, and provides the highest caliber vendor-authorized instruction at our training centers, online, or onsite. ~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:332670 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
