I'm fascinated by forms auth in 7.0, however I'm having major issues passing token to network service post forms authentication. I get the anonymous denied.My
connection string from the root inherited down is using SSPI and my app pool is integrated using "network services".
I scraped my dev environment 9 times already and starting again. Is the only way to get this to work is using WCF? I want to keep it all integrated and in the pipeline.
I've not tried this myself with forms authentication, integrated pipeline and sql 2005. Normally when using integrated security (the application pool running as network service), the machine account IIS is running on needs the appropriate permissions on
the sql server 2005 db. I'd verify the machine account has permissions.
yep tried that, I dont think permission is the issue. I granted Network Service everything under the sun just for testing. I could just setup SQL credentials via the connection string, but that would be going outside the pipeline.
From the errors I'm seeing I somehow need to pass the authenticated token to network service post forms login..
myles073
4 Posts
IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied
May 11, 2008 11:18 PM|LINK
I scraped my dev environment 9 times already and starting again. Is the only way to get this to work is using WCF? I want to keep it all integrated and in the pipeline.
thanks
steve schofi...
5682 Posts
MVP
Moderator
Re: IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied
May 12, 2008 08:43 AM|LINK
I've not tried this myself with forms authentication, integrated pipeline and sql 2005. Normally when using integrated security (the application pool running as network service), the machine account IIS is running on needs the appropriate permissions on the sql server 2005 db. I'd verify the machine account has permissions.
Steve Schofield
Windows Server MVP - IIS
http://iislogs.com/steveschofield
http://www.IISLogs.com
Log archival solution
Install, Configure, Forget
myles073
4 Posts
Re: IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied
May 13, 2008 12:49 AM|LINK
yep tried that, I dont think permission is the issue. I granted Network Service everything under the sun just for testing. I could just setup SQL credentials via the connection string, but that would be going outside the pipeline.
From the errors I'm seeing I somehow need to pass the authenticated token to network service post forms login..
myles073
4 Posts
Re: IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied
May 14, 2008 01:47 AM|LINK
only way to get it to work using network services was to grant
NT AUTHORITY\ANONYMOUS LOGON access to aspnet db.
anyone know another work around not using anonymous?
steve schofi...
5682 Posts
MVP
Moderator
Re: IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied
May 14, 2008 04:40 AM|LINK
Can you verify if your anonymous authentication module is set to 'inherit application pool identity? Or does it list IUSR?
Steve Schofield
Windows Server MVP - IIS
http://iislogs.com/steveschofield
http://www.IISLogs.com
Log archival solution
Install, Configure, Forget
myles073
4 Posts
Re: IIS 7.0 - SQL 2005 - Using forms auth - anonymous denied
May 16, 2008 01:42 AM|LINK
Yep 100% - I want to keep the app pool inheritance (Network Service) and not use IUSR.