1

I am experiencing the double-hop SQL server log in problem associated with MVC projects.

I am using IIS 7.5; MVC 5; Visual Studio 2013, and simple Windows 7 system running IIS.

I need to make an intranet project with either Windows Authentication or AD Group authentication.

If I use the latter, it doesn't work at all, so I am postponing that, but eventually the goal would be to use AD groups.

For the former I tried getting Kerberos working (and reading dozens of posts) but I could only get the site working on its host machine (hardly worth doing).

I was able to get a special SQL account and password and could get it running using a hard-wired connection string in web.config with the password hard-coded in the app, but this is only for development purposes and needs to be replaced long before it reaches prod.

I have read the website at

http://blogs.technet.com/b/askds/archive/2008/11/25/fun-with-the-kerberos-delegation-web-site.aspx

and following its steps would require three or four different teams working on it to get everything in place where I work.

Does anyone know of any simpler paradigm for MVC projects that enables them to work on an intranet site with either Windows-authentication or AD-group-authentication? Even links to other solutions would be very, very welcome.

If interested, please see also:

https://serverfault.com/questions/656243/iis-app-pool-set-credentials-not-working-for-specific-network-account

Thanks in advance.

Improve this question

1 Answer 1

Reset to default
1

You can use certificates instead of Kerberos delegation.

Improve this answer
Sign up to request clarification or add additional context in comments.

1 Comment

Another way of doing this is having the app pool run under a user account (preferably a domain account), then one uses the following settings in web. config: Integrated Security=false; Trusted_Connection=True; NOTE: I also use MultipleActiveResultSets=true; which helps with other issues... the relevant app pool account must be granted a SQL account with the relevant permissions for your app

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.