Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

Host Process User = Local User ?
Tomas33
#1 Posted : Tuesday, February 21, 2012 10:53:54 AM(UTC)
Groups: Member
Joined: 2/21/2012(UTC)
Posts: 1

Hello,

I'm just creating a SOAP-webservice that connects to a MSSQL Database.
Because the SQL-connect uses NT Authentication, the process must be running under local privileges.

Is there any possibility to run the asmx under local privileges?
In a way that System.Security.Principal.WindowsIdentity.GetCurrent().Name.ToString() would return something like "myNTDomain\tomas33" and not "NT-AUTHORITY\SYSTEM".

Any help is greatly appreciated.

Thanks

Paul


Ultidev Team
#2 Posted : Tuesday, February 21, 2012 11:33:26 AM(UTC)
Ultidev Team

Groups: Administration
Joined: 11/3/2005(UTC)
Posts: 2,253

Thanks: 28 times
Was thanked: 60 time(s) in 59 post(s)
Hello, Paul.

Although it's impossible to make a host process run under an account other that Network Service or Local System, you could implement one of the following alternatives:

- Run the code that talks to the database from within a ServicedComponent, which can run within a separate host process under any desired user identity. That's the best practice from the security stand point.
- Create a SQL Login for Network Service account. If the SQL database requires a specific low-privilege account, why not use Network Service?
- And what is probably not an option in your case, use SQL authentication with encrypted connection string.

Best regards,
UltiDev Team.
Please donate at http://www.ultidev.com/products/Donate.aspx to help us improve our products.
Guest
#3 Posted : Monday, January 8, 2018 8:51:12 PM(UTC)
Groups:

Message was deleted by a Moderator.
Rss Feed  Atom Feed
Users browsing this topic
Guest (2)
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You can vote in polls in this forum.