Showing posts with label reading. Show all posts
Showing posts with label reading. Show all posts

Tuesday, March 27, 2012

Hlep with Simple questions about Authentication

The following question may be trivial, however, I just can't make it clear t
o
myself, even after reading through the Books Online.
I have two machines in the same network.
A hosts Sql Server (named AS), B access the database ASD in Sql Server AS.
A has windows logon info as UserA and PasswordA, (administrator account).
B has windows logon info as UserB and PasswordB. Application is running
under this account.
The Sql Server is set to Windows and Sql Serevr Mixed Authentication Mode,
The database ASD has a UserAS and PasswordAS as the db owner.
My question is:To successfully access AS from B, does the connection first
pass A's window authentication, then pass the AS's SQL Server authentication
(if set to Mixed Mode)?
If this is true,
What connection string (in ADO.Net) should I have to connect to the Database
?
Or, what authentication settings I should have(set) to make a successful
connection in the case describled above (B access AS on A)?
I observered, with the following string to work: "user
id=UserAS;password=PasswordASD; data source=AS;initial catalog=ASD; persist
security info=True;" , I should first set the A's login credential in B by
visiting B's network place.
Additional Question:
When I use Windows NT Integrated Security from B, which username and
password is used to acess AS on A?
When I use specific user name and password, how to create a pair of username
and password in AS so that the username and password can be authenticated by
the windows A and sql server AS.
Thanks.Start with this
http://vyaskn.tripod.com/sql_server...t_practices.htm --sec
urity
best practices
"zhaounknown" <zhaounknown@.discussions.microsoft.com> wrote in message
news:D272700C-B174-4853-83C3-E0CC8B53830D@.microsoft.com...
> The following question may be trivial, however, I just can't make it clear
> to
> myself, even after reading through the Books Online.
> I have two machines in the same network.
> A hosts Sql Server (named AS), B access the database ASD in Sql Server AS.
> A has windows logon info as UserA and PasswordA, (administrator account).
> B has windows logon info as UserB and PasswordB. Application is running
> under this account.
> The Sql Server is set to Windows and Sql Serevr Mixed Authentication Mode,
> The database ASD has a UserAS and PasswordAS as the db owner.
> My question is:To successfully access AS from B, does the connection first
> pass A's window authentication, then pass the AS's SQL Server
> authentication
> (if set to Mixed Mode)?
> If this is true,
> What connection string (in ADO.Net) should I have to connect to the
> Database?
> Or, what authentication settings I should have(set) to make a successful
> connection in the case describled above (B access AS on A)?
> I observered, with the following string to work: "user
> id=UserAS;password=PasswordASD; data source=AS;initial catalog=ASD;
> persist
> security info=True;" , I should first set the A's login credential in B by
> visiting B's network place.
> Additional Question:
> When I use Windows NT Integrated Security from B, which username and
> password is used to acess AS on A?
> When I use specific user name and password, how to create a pair of
> username
> and password in AS so that the username and password can be authenticated
> by
> the windows A and sql server AS.
> Thanks.|||I read though the article at the link.
It stated that:
Mixed mode: Valid SQL Server login accounts and passwords are not related to
your Microsoft Windows NT/2000 accounts. With this authentication mode, you
must supply the SQL Server login and password when you connect to SQL Server
.
I did have sql server user name and password set in the SQL Server and
supply the username and password for connection. But the connection is
refused because "SQL Server doesn't exists or access denied."
"Uri Dimant" wrote:

> Start with this
> http://vyaskn.tripod.com/sql_server...t_practices.htm --s
ecurity
> best practices
>
>
>
>
>
> "zhaounknown" <zhaounknown@.discussions.microsoft.com> wrote in message
> news:D272700C-B174-4853-83C3-E0CC8B53830D@.microsoft.com...
>
>

Sunday, February 19, 2012

HIding databases that a user does not have permission to

I remember reading a blog post which showed you how to hide databases other than the ones the current user has permission to see. My ISP is getting a lot more SQL 2005 databases on the server and I would like to encourage them to only show me mine in Management Studio rather than the huge list I have to scroll down. Is this possible?

(the blog post *may* have been for SQL 2000 but I'm looking for a SQL 2005 solution)

Yes, there have been some recent discussions about this. You need to revoke the permission 'VIEW ANY DATABASE' from the role PUBLIC (and then grant it to any server principal who should have it but don't get it by default). Credit to Kalen Delaney and Dan Guzman who pointed this out... wrote in message news:b45aadf8-59d9-4531-9ba7-dac473bbcade@.discussions.microsoft.com... >I remember reading a blog post which showed you how to hide databases
> other than the ones the current user has permission to see. My ISP is
> getting a lot more SQL 2005 databases on the server and I would like to
> encourage them to only show me mine in Management Studio rather than the
> huge list I have to scroll down. Is this possible? >
> (the blog post *may* have been for SQL 2000 but I'm looking for a SQL
> 2005 solution) > > >
>

HideMemberIF: Parent vs. Only Child w/ Parent

Even after reading the SQL BOL definitions, I'm unable to actually demonstrate a real-world difference between the "Never", "ParentName" and "Only Child w/ ParentName" settings for the HideMemberIF property with my multi-level hierarchy on it's ragged dimension. Specifically, my hierarchy simply will not hide a member named the same as it's parent, when viewed in VS's Dimension browser window, regardless of the HIdeMemberIF setting chosen. I've not yet loaded SQL 2K5's SP1, and here are my questions:

(1) Could it be that VS's dimension browser and/or cube browser do not support the HideMemberIF property?

(2) If so, has that changed with SP1?

I think I have seen this issue already in AS2000. The HideMemberIf property requires you to fill empty fields with null or a blank. It is only used for empty levels and not for parent and children with the same name. If you update all your empty levels with a blank or null, will that help?

Regards

Thomas Ivarsson

|||

Hi,

this is a weekness in the VS Browser - but the function works as documented. I use it regular in my projects. You need to use a client which is capable to set the "MDX Compatibility" property to the value of two to browse the proper structure. (Excel 2003 with the CubeAnalysis ADDIN is capable - and many othere clients)

See http://msdn2.microsoft.com/en-us/library/ms365406.aspx for further details or http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=653115&SiteID=1

HANNES

|||

This is very encouraging news! Thank you.

Do you know if either

(1) ProClarity 6.1, or

(2) Strategy Companion

support MDX Compatibility = 2 ?

I'll check with the manufacturers myself and reply here with their responses.

Daniel

|||

Dan

Did you get a response from ProClarity? I have the same problem and want to set it to 2.

|||I did not get a response.

HideMemberIF: Parent vs. Only Child w/ Parent

Even after reading the SQL BOL definitions, I'm unable to actually demonstrate a real-world difference between the "Never", "ParentName" and "Only Child w/ ParentName" settings for the HideMemberIF property with my multi-level hierarchy on it's ragged dimension. Specifically, my hierarchy simply will not hide a member named the same as it's parent, when viewed in VS's Dimension browser window, regardless of the HIdeMemberIF setting chosen. I've not yet loaded SQL 2K5's SP1, and here are my questions:

(1) Could it be that VS's dimension browser and/or cube browser do not support the HideMemberIF property?

(2) If so, has that changed with SP1?

I think I have seen this issue already in AS2000. The HideMemberIf property requires you to fill empty fields with null or a blank. It is only used for empty levels and not for parent and children with the same name. If you update all your empty levels with a blank or null, will that help?

Regards

Thomas Ivarsson

|||

Hi,

this is a weekness in the VS Browser - but the function works as documented. I use it regular in my projects. You need to use a client which is capable to set the "MDX Compatibility" property to the value of two to browse the proper structure. (Excel 2003 with the CubeAnalysis ADDIN is capable - and many othere clients)

See http://msdn2.microsoft.com/en-us/library/ms365406.aspx for further details or http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=653115&SiteID=1

HANNES

|||

This is very encouraging news! Thank you.

Do you know if either

(1) ProClarity 6.1, or

(2) Strategy Companion

support MDX Compatibility = 2 ?

I'll check with the manufacturers myself and reply here with their responses.

Daniel

|||

Dan

Did you get a response from ProClarity? I have the same problem and want to set it to 2.

|||I did not get a response.

HideMemberIF: Parent vs. Only Child w/ Parent

Even after reading the SQL BOL definitions, I'm unable to actually demonstrate a real-world difference between the "Never", "ParentName" and "Only Child w/ ParentName" settings for the HideMemberIF property with my multi-level hierarchy on it's ragged dimension. Specifically, my hierarchy simply will not hide a member named the same as it's parent, when viewed in VS's Dimension browser window, regardless of the HIdeMemberIF setting chosen. I've not yet loaded SQL 2K5's SP1, and here are my questions:

(1) Could it be that VS's dimension browser and/or cube browser do not support the HideMemberIF property?

(2) If so, has that changed with SP1?

I think I have seen this issue already in AS2000. The HideMemberIf property requires you to fill empty fields with null or a blank. It is only used for empty levels and not for parent and children with the same name. If you update all your empty levels with a blank or null, will that help?

Regards

Thomas Ivarsson

|||

Hi,

this is a weekness in the VS Browser - but the function works as documented. I use it regular in my projects. You need to use a client which is capable to set the "MDX Compatibility" property to the value of two to browse the proper structure. (Excel 2003 with the CubeAnalysis ADDIN is capable - and many othere clients)

See http://msdn2.microsoft.com/en-us/library/ms365406.aspx for further details or http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=653115&SiteID=1

HANNES

|||

This is very encouraging news! Thank you.

Do you know if either

(1) ProClarity 6.1, or

(2) Strategy Companion

support MDX Compatibility = 2 ?

I'll check with the manufacturers myself and reply here with their responses.

Daniel

|||

Dan

Did you get a response from ProClarity? I have the same problem and want to set it to 2.

|||I did not get a response.

HideMemberIF: Parent vs. Only Child w/ Parent

Even after reading the SQL BOL definitions, I'm unable to actually demonstrate a real-world difference between the "Never", "ParentName" and "Only Child w/ ParentName" settings for the HideMemberIF property with my multi-level hierarchy on it's ragged dimension. Specifically, my hierarchy simply will not hide a member named the same as it's parent, when viewed in VS's Dimension browser window, regardless of the HIdeMemberIF setting chosen. I've not yet loaded SQL 2K5's SP1, and here are my questions:

(1) Could it be that VS's dimension browser and/or cube browser do not support the HideMemberIF property?

(2) If so, has that changed with SP1?

I think I have seen this issue already in AS2000. The HideMemberIf property requires you to fill empty fields with null or a blank. It is only used for empty levels and not for parent and children with the same name. If you update all your empty levels with a blank or null, will that help?

Regards

Thomas Ivarsson

|||

Hi,

this is a weekness in the VS Browser - but the function works as documented. I use it regular in my projects. You need to use a client which is capable to set the "MDX Compatibility" property to the value of two to browse the proper structure. (Excel 2003 with the CubeAnalysis ADDIN is capable - and many othere clients)

See http://msdn2.microsoft.com/en-us/library/ms365406.aspx for further details or http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=653115&SiteID=1

HANNES

|||

This is very encouraging news! Thank you.

Do you know if either

(1) ProClarity 6.1, or

(2) Strategy Companion

support MDX Compatibility = 2 ?

I'll check with the manufacturers myself and reply here with their responses.

Daniel

|||

Dan

Did you get a response from ProClarity? I have the same problem and want to set it to 2.

|||I did not get a response.