x

[Microsoft][ODBC SQL Server Driver][SQL Server]Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'

Hi All:

Maybe I did not explain myself very clear. Here you have a better description of the problem:

Scenario:

Server1: Windows Server 2003 with IIS and SQL Server 2000 running together. An ODBC connection is used to connect the pages on the IIS to the database in SQL. IIS, ODBC and SQL server are using Windows authentication (Anonymous is disable in the IIS.) The ODBC verify the authenticity of the login ID with Windows NT authentication using the network login ID.

Server 2: Windows Server 2008 (Datacenter), SQL Server 2008. Even thought, I installed IIS in this server, I do not use it for anything else but Reporting Services. IIS is in a default configuration.

Here it is the change I am trying to accomplish: 1. A moved the database from Server 1 (SQL 2000) to Server 2 (SQL 2008). No problems so far. I can access the data in both servers without any problem and run all store procedures, etc., etc. using the SQL Management Studio.

  1. I go to Server 1 and change the ODBC connection to point to the new location (Server 2) and I get the following error when I try to access the database thru Internet Explorer on my PC.

Description: [Microsoft][ODBC SQL Server Driver][SQL Server]Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
Source: Microsoft OLE DB Provider for ODBC Drivers
SQLState: 28000
NativeError: 18456

  1. The servers are located in the same domain. We use active directory. I belong to the administrator group of the domain and I have administrator rights on both SQL Servers.

  2. The pages that connect to the database were created using regular ASP/ADO and VBScript. Nothing fancy, plain vanilla code as you can see by the following VBScript section of a page:

On Error Resume Next

Dim oConn
Dim blnCriticalError

Set oConn = Server.CreateObject("ADODB.Connection")
oConn.Open "DSN=ODBCName"

Set oRSz = Server.CreateObject("ADODB.RecordSet")
oRSz.Open "SQLTable", oConn

  1. Are there any suggestions on how to solve this problem? I do not want to use AUTHORITY\ANONYMOUS to connect to the SQL server which if I added to the logins of the SQL server 2008 the page works just fine.

Thank you all.

more ▼

asked May 12, 2010 at 03:01 PM in Default

SAN1901 gravatar image

SAN1901
1 1 1 2

(comments are locked)
10|1200 characters needed characters left

2 answers: sort voted first

Are the two SQL servers in the same domain? If not, is there a trust relationship between the domains to which they belong?

more ▼

answered May 12, 2010 at 04:24 PM

Matt Whitfield gravatar image

Matt Whitfield ♦♦
29.5k 61 65 87

Yes, both servers are in the same domain.
May 13, 2010 at 08:45 AM SAN1901
(comments are locked)
10|1200 characters needed characters left

Look at the SQL 2008 box's security. is it set to Windows Auth or mixed?

You should also look at the web apps config...

It doesn't look like the app is getting the users credentials

more ▼

answered Jun 11, 2010 at 04:01 PM

Jimmy gravatar image

Jimmy
11 1 1 2

(comments are locked)
10|1200 characters needed characters left
Your answer
toggle preview:

Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

New code box

There's a new way to format code on the site - the red speech bubble logo will automatically format T-SQL for you. The original code box is still there for XML, etc. More details here.

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

SQL Server Central

Need long-form SQL discussion? SQLserverCentral.com is the place.

Topics:

x1850
x163
x89

asked: May 12, 2010 at 03:01 PM

Seen: 7436 times

Last Updated: May 14, 2010 at 01:31 PM