Client Management Suite

 View Only
  • 1.  Using Windows Authentication for DB credentials?

    Posted Jul 27, 2016 06:41 AM

    Hello,

    I'm installing CMS 8.x and I'm trying to use "SERVER\user_cmsdb" ad the DB credentials for SQL Server with Windows Authentication.

    I've installed CMS using SIM from the "Administrator" account and I've specified "SERVER\user_cms" as the application credential. This is working properly and authentifies to SQL using Windows Authentication.

    If I try to specify the other credential in Settings > Notification Server > Database settings after installation I can't validate the connection  because NS is trying to use SQL Authentication:

    Login failed for user '.\user_cmsdb'. Reason: An attempt to login using SQL authentication failed. Server is configured for Windows authentication only.

    Why the user specified in the Web Site configuration part of SIM installation is used to connect to SQL using Windows Authentication and after we can't change to another user and use the same type of authentication?

    Thanks!

     



  • 2.  RE: Using Windows Authentication for DB credentials?

    Posted Jul 27, 2016 06:43 AM

    Of course, I don't want to enable SA ;-)

    I can enable it, add an SQL user and all works well. But I would like to stay with Windows Authentication if possible.

    Thanks.

     



  • 3.  RE: Using Windows Authentication for DB credentials?

    Broadcom Employee
    Posted Aug 01, 2016 11:14 AM

    The "windows authentification" is only working with "application identity" set as main impersonation for all NS modules. 

    The only other option is to use "sa" type access to SQL, as NS can't (efficiently) work with DB under another windows user - it will bring too much "impersonation" calls to WinAPI every time we have to switch from "application identity" to provided windows user to access SQL.

    Impersonation is relatevily "costy" operation, so when NS (potentially) does hundreds and thousands SQL access calls, it might be a real bottleneck.

    Juri.