.NETGURU
  Search:  
NamespacesDiscussions.NET v1.1Dot Net Guru's BlogIT Certification
Using Impersonation
Messages   Related Types
This message was discovered on microsoft.public.dotnet.framework.aspnet.webservices.
Responses highlighted in red are from those people who are likely to be able to contribute good, authoratitive information to this discussion. They include Microsoft employees, MVP's and others who IMHO contribute well to these kinds of discussions.
Post a new message to this list...

Gravy (VIP)
Is it ok to use impersonation in the web.config file for a web service?

Let me tell you why I ask. My web service to ultimately connection to a sql
server database. The recommended way to connect to SqlServer is to use a
trusted connection (nt authentication etc), but inorder for me to do this I
want to change the user my webservice (aspnet_wp) is running under - don't
I? Hence the use of the Impersonation element in the web.config file. I
suppose I could use normal authentication to SqlServer but that means I have
to keep a username and password somewhere.

BYW, I'm using WSE 2.0 for authentication - don't know if this would make a
difference.

Thanks for any help

Graham Allwood
Reply to this message...
 
    
Jared
Gravy,
Once your user is authenticated to your web service, does every user
require/get access to the database? If so, and they all get the same access,
then allowing access to the ASPNET account will do what you want. If you
need to enforce non-repudiation, or sql security then you will want to
impersonate the user. It all comes down to what you need to do with the
credentials, fact remains, they did supply the correct credentials to access
the service.

Jared

"Gravy" <Click here to reveal e-mail address> wrote in message
news:Click here to reveal e-mail address...
[Original message clipped]
Reply to this message...
 
    
Girish bharadwaj
Well, you can potentially run a different "Datalayer" component under a
different user who can access the database.

"Gravy" <Click here to reveal e-mail address> wrote in message
news:Click here to reveal e-mail address...
[Original message clipped]
Reply to this message...
 
 




ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
Ad


Need Dot Net Interview Questions?
Ask ExamGuru, Inc. for advice and help on Passing .Net Interviews
.Net Projects
Best-of-breed application framework for .NET projects, developed by ExamGuru, Inc. and ExamGuru IT
Free .net Help
Commission ExamGuru, Inc. and his team for your next bespoke software project
FogBUGZ
The only bug tracking system carefully crafted with one goal in mind: helping teams create great software.
Awesome Tools
If you don't know about these, you're missing out... IT Certification Questions
IT Interview Questions
Free Oracle 10g Training
MCSE Boortcamp
Cisco Study Guides
Cheap Study Guides
Exact Questions
Dot Net Interview Questions
Oracle OCP
Cheap Travel
Designer Perfumes - Wholesale Prices
Free Programming Tutorials
 
ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
 Copyright © ExamGuru, Inc. 2001-2006
Contact Us - Terms of Use - Privacy Policy - www.dot-net-guru.com - www.examguru.net - www.oraclesource.net - www.itinterviews.net - www.examguru.net/ITCertification