Alpha Video Training
Results 1 to 3 of 3

Thread: string?Connection String Explanation

  1. #1
    Member
    Real Name
    Chris Turnbull
    Join Date
    Oct 2009
    Posts
    445

    Default string?Connection String Explanation

    Hi,

    I am a little confused as to how the connection string works in Alpha.

    I am using MS SQL 2008 and when you security harden a sql Server the best practice is to just use Windows Authentication and disable the sa.

    Can someone explain when you choose Windows Authentication what user is actually used for the connection as you do not have to enter any details.

    Thanks

    Chris

  2. #2
    "Certified" Alphaholic Clipper87's Avatar
    Real Name
    Frank
    Join Date
    Dec 2008
    Location
    Antwerp, Belgium
    Posts
    1,891

    Default Re: string?Connection String Explanation

    I think you answered the question yourself: Windows authentication will authenticate automatically against the SQL server with the credentials from the current logged on Windows user. See this http://www.greensql.com/content/sql-...best-practices

    I jumped in not because I'm a security expert but because I find it an interesting question, especially when you wonder which authentication method to choose for deployment of the Alpha WAS where only your Alpha application needs to authenticate to the WAS via the connection string (internet web users authenticate against your Alpha web application if it has security). I've been using SQL server authentication so far but these documents seem not to recommend that. Let's hope a security guru jumps in on this thread.
    Frank

    Tell me and I'll forget; show me and I may remember; involve me and I'll understand

  3. #3
    Member
    Real Name
    Chris Turnbull
    Join Date
    Oct 2009
    Posts
    445

    Default Re: string?Connection String Explanation

    Clipper,

    That was my point.

    To Security Harden and SQL Server you should just allow windows Authentication but Alpha Doesn't seem to allow that.

    I should be able to setup a Domain User with near no rights on the network and use that user in the connectio string. I'm not sure you can do that with Alpha. Unless I am doing something wrong.

    Chris

Similar Threads

  1. Error converting named connection to connection string
    By michaelxcampbell in forum Application Server Version 10 - Web/Browser Applications
    Replies: 2
    Last Post: 09-21-2011, 02:38 PM
  2. connection string problem
    By Steve Wood in forum Application Server Version 10 - Web/Browser Applications
    Replies: 1
    Last Post: 03-08-2011, 07:45 AM
  3. Connection String
    By jin_Bat in forum Application Server Version 10 - Web/Browser Applications
    Replies: 1
    Last Post: 09-30-2010, 03:13 PM
  4. connection string to Access
    By Larry Weidner in forum Application Server Version 10 - Web/Browser Applications
    Replies: 0
    Last Post: 03-08-2010, 03:35 PM
  5. ODBC Connection String ?
    By Kevin Ward in forum Alpha Five Version 5
    Replies: 2
    Last Post: 11-03-2003, 12:27 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •