Gemini Community Support Site

This Gemini community support site can be used to find solutions to product issues. You can log in using Open Id, Google Profile and even Facebook. Feel free to ask a question or browse FAQs and documentation. Product tour videos are also available along with how-to videos demonstrating key Gemini capabilities.




trying to manually install gemini with remote sql 2k5 using domain auth

web-app

Hello,

I have been trying to figure out from the 2.2.6 documentation how I should edit the web.config to reflect a remote sql instance holding the gemini db and accessing this db with a windows AD account with a gemini virtual directory in c:\inetpub\virtualdirname\

I have looked through the forum here and am not much clearer on what to do after referring to the sections in the 2.2.6 ( sections 9.5; 9.51;9.52 in the 2.2.6 docs )) gemini documentation.

I think my issue may relate to the worker process trying to make a connection as the IUSR_hostname account rather than the domain\user account I have specified.


I tried looking at msdn and some other pages such as

http://www.feed-squirrel.com/index.cfm?evt=viewItem&ID=39092

The problem is when trying to read up on identity impersonation most developer based pages seems to just say "insert string X between the <system.web> tags "

As the gemini web.config seems to have quite a few of these tags I am finding it rather difficult to determine where these entries should go.

My web config connection strings read something like this :

..data source=SQLSERVERNAME;initial catalog=Gemini;user id=domainname\username;password=userspassword"/>

 I want to make the connection to the DB server as the AD user but preferably would like to still run the site under the IUSR_machinename account.

My dialect is set for sql2005 to match the DB server, the gemini DB exists; the scripts were run on the db,  the domain user I want to use for the connection has some rights on the DB and at the very least should be able to authenticate.

Are you able to tell me what rights/roles  the DB connection user actually needs on the DB ?

 
Many thanks if you are able to assist.

 

 

 

 

 

 

remotesqlwithdomainauth
· 1
remotesqlwithdomainauth
Replies (5)
helpful
0
not helpful

Your connection string is configured for SQL user name / password authentication.

Please set it like so:

data source=SQLSERVERNAME;initial catalog=Gemini;trusted_connection=true;"/>

Make sure not to put impersonate = true as this will cause the connection to use each users account.


Mark Wing
· 9108
Mark Wing
helpful
0
not helpful

Thanks Mark,

I have made the suggested change and the connection to the Db is now being made as DOMAINNAME\computername$.

Can you advise how I might force the connection to use the specific service account I have created that has dbowner rights on the sql db ?

 

 

 

 

 


remotesqlwithdomainauth
· 1
remotesqlwithdomainauth
helpful
0
not helpful

You can not force the connection string to use a specific windows account. You will have to run the web app under this account. You can do so via IIS security settings for the web app.


Mark Wing
· 9108
Mark Wing
helpful
0
not helpful

Hi markwing,

I have adjusted the website and web.config settings and also have adjusted some local group membership to allow permissions into the  .NET 2.0 temp directory and root of the c:\ ( mail logging for testing) and all is well.

Thank you for your kind assistance.


remotesqlwithdomainauth
· 1
remotesqlwithdomainauth
helpful
0
not helpful

Glad to hear that all is working as expected.

Thank you for the update.


Mark Wing
· 9108
Mark Wing