Monday, March 12, 2012

Possible to Use Windows Authentication on Peer to Peer Network?

Is there a way to use Windows Authentication to log on to an SQL server
instance accross a peer to peer network without a Domain?
-- Right. Normally in a domain environment you're authenticated on the
domain and then use those credentials to authenticate to SQL.
If you're not in a domain, then you're in a workgroup.
Workgroup security. To connect to SQL using Windows Authetication, the
NT
username & passwords must match on both computers.
Yes (possible) and no (not recommandable).
-Yes: You can do this by choosing the same username and password on
both computers, the calling computer and the server. If you think now
"Well thats a bit weird...", I can acknowldge. The other possible
solution would be, if you use some programming language wich is able to
handle a security context, like C# with the appropiate classes, you
could impersonate the thread using the remote security context for
connecting.
-No: in common you cannot use integrated authentication across the
computers because the SQL Server can=B4t trust these unknown and
unreliable machines. Therefore a domain should be in place which can
guarantee with the user token for the real permissions of the user.
HTH, jens Suessmeyer.

No comments:

Post a Comment