IIS Defaulting to IWAM user

Hi,

I dont know much about IIS, so excuse me while I do my best to explain
my problem.

Scenario:

Company Intranet. Writing an ASP page that executes a DTS package on
SQL Server. Although the page was running OK, when checking the logs
on SQL Server, it was showing a login failure. From microsoft.com:

----------------
When you execute a DTS Package from an ASP page, the package executes
in the security context of the Web site visitor, which may be that of
the Windows user (if the web site is configured for Basic or NT
Authentication) or of the Anonymous account. The package does not
execute in the security context of the user ID supplied to load the
package from SQL Server.
----------------

The IIS site was set up to use windows authentication, and the
username within the SQL Server log was IWAM_SERVER, so that made
sense.

So, I changed the IIS site to use anonymous access, and specified a
domain account (and restarted IIS). Even though I did this, a login
failure for IWAM_SERVER still shows up on SQL Server.

I can add a SQL Server login for IWAM_SERVER, but the DTS packgage
needs network wide permissions to distribute files, so I need to use a
domain account. I also need the account to be the one that I specify,
as it requires certain privelages on SQL Server. Can anyone tell me
why it keeps defaulting to IWAM_SERVER, and not the account I specify?

Thanks.

Red.


Windows 2000 SP4
IIS 5.0

Are you using IIS5?

If so, then the default process identity for dllhost.exe is
IWAM_<servername>. You may be running into a "double-hop" authentication
error. Try enabling Basic Authentication, and see if the actual user is
passed back to SQL Server.

If so, then we do have a double-hop issue, and we should investigate using
Kerberos instead.

If not, then we have some other issue (e.g. your application not
impersonating properly)

Cheers
Ken

--
My IIS Blog: www.adOpenStatic.com/cs/blogs/ken

"Red" <funkandlove RemoveThis @yahoo.co.uk> wrote in message
news:1180090680.484988.274410@w5g2000hsg.googlegroups.com...
> Hi,
>
> I dont know much about IIS, so excuse me while I do my best to explain
> my problem.
>
> Scenario:
>
> Company Intranet. Writing an ASP page that executes a DTS package on
> SQL Server. Although the page was running OK, when checking the logs
> on SQL Server, it was showing a login failure. From microsoft.com:
>
> ----------------
> When you execute a DTS Package from an ASP page, the package executes
> in the security context of the Web site visitor, which may be that of
> the Windows user (if the web site is configured for Basic or NT
> Authentication) or of the Anonymous account. The package does not
> execute in the security context of the user ID supplied to load the
> package from SQL Server.
> ----------------
>
> The IIS site was set up to use windows authentication, and the
> username within the SQL Server log was IWAM_SERVER, so that made
> sense.
>
> So, I changed the IIS site to use anonymous access, and specified a
> domain account (and restarted IIS). Even though I did this, a login
> failure for IWAM_SERVER still shows up on SQL Server.
>
> I can add a SQL Server login for IWAM_SERVER, but the DTS packgage
> needs network wide permissions to distribute files, so I need to use a
> domain account. I also need the account to be the one that I specify,
> as it requires certain privelages on SQL Server. Can anyone tell me
> why it keeps defaulting to IWAM_SERVER, and not the account I specify?
>
> Thanks.
>
> Red.
>
>
> Windows 2000 SP4
> IIS 5.0
>