Previous Next

Thread: IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied

Last post 05-15-2008 9:42 PM by myles073. 5 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (6 items)

Sort Posts:

  • 05-11-2008, 7:18 PM

    • myles073
    • Not Ranked
    • Joined on 05-11-2008, 7:11 PM
    • Posts 4
    • myles073

    IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied

    I'm fascinated by forms auth in 7.0, however I'm having major issues passing token to network service post forms authentication. I get the anonymous denied.My connection string from the root inherited down is using SSPI and my app pool is integrated using "network services".

    I scraped my dev environment 9 times already and starting again. Is the only way to get this to work is using WCF? I want to keep it all integrated and in the pipeline.

    thanks

     

     

  • 05-12-2008, 4:43 AM In reply to

    Re: IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied

    I've not tried this myself with forms authentication, integrated pipeline and sql 2005.  Normally when using integrated security (the application pool running as network service), the machine account IIS is running on needs the appropriate permissions on the sql server 2005 db.  I'd verify the machine account has permissions.

    Steve Schofield
    Windows Server MVP - IIS
    MCTS - Windows Hosting

    http://weblogs.asp.net/steveschofield
    http://www.appcmd.com
    http://www.orcsweb.com/
    Managed Hosting Solutions
    #1 in Service and Support
  • 05-12-2008, 8:49 PM In reply to

    • myles073
    • Not Ranked
    • Joined on 05-11-2008, 7:11 PM
    • Posts 4
    • myles073

    Re: IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied

    yep tried that, I dont think permission is the issue. I granted Network Service everything under the sun just for testing. I could just setup SQL credentials via the connection string, but that would be going outside the pipeline.

    From the errors I'm seeing I somehow need to pass the authenticated token to network service post forms login.. 

     

  • 05-13-2008, 9:47 PM In reply to

    • myles073
    • Not Ranked
    • Joined on 05-11-2008, 7:11 PM
    • Posts 4
    • myles073

    Re: IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied

    only way to get it to work using network services was to grant   

    NT AUTHORITY\ANONYMOUS LOGON access to aspnet db.

    anyone know another work around not using anonymous?

  • 05-14-2008, 12:40 AM In reply to

    Re: IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied

    Can you verify if your anonymous authentication module is set to 'inherit application pool identity?  Or does it list IUSR?

     

    Steve Schofield
    Windows Server MVP - IIS
    MCTS - Windows Hosting

    http://weblogs.asp.net/steveschofield
    http://www.appcmd.com
    http://www.orcsweb.com/
    Managed Hosting Solutions
    #1 in Service and Support
  • 05-15-2008, 9:42 PM In reply to

    • myles073
    • Not Ranked
    • Joined on 05-11-2008, 7:11 PM
    • Posts 4
    • myles073

    Re: IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied

    Yep 100% - I want to keep the app pool inheritance (Network Service) and not use IUSR.

Page 1 of 1 (6 items)
Page view counter