Security Basics mailing list archives

RE: REMOTE sql Server Access


From: "Sarbjit Singh Gill" <ssgill () gilltechnologies com>
Date: Sat, 25 Sep 2004 17:04:08 +0800

Here is some info on connection string on most commond DBs/resources.

www.connectionstrings.com

 

-----Original Message-----
From: Bénoni MARTIN [mailto:Benoni.MARTIN () libertis ga] 
Sent: Saturday, September 25, 2004 12:16 AM
To: Andrew Ryan
Cc: Security-Basics
Subject: RE: REMOTE sql Server Access

Ah that was something like this, thanks !

My connection string has to be ended by : "APP=ASP Script"

I am gonna use soon RH 9/Perl/MySQL and I would probably have then the same
trouble ! I did not knew I had to add this :(

Thanks a lot, was as simple as that ! :(

But, AFAIK, a socket is a @IP / port number / protocol, and I specified that
in my connection string ... Humm ...  Still have things to learn :(



-----Message d'origine-----
De : Andrew Ryan [mailto:andyryan () localnet com] Envoyé : vendredi 24
septembre 2004 17:07 À : Bénoni MARTIN Objet : Re: REMOTE sql Server Access

what about the machanism that you are using to connect?  make sure it is
looking in the right spot for the connection...ie on a linux server using
perl to connect to a mysql database...by default it will look for a socket
on /tmp/mysqld.sock. This can differ on different flaovors of 
linux (sometimes in /var/mysqld/mysql.sock) .   Id imagine that this 
could be the case with the ASP data access.

Andrew N. Ryan
LocalNet Corp.
Programming Manager/Systems Administrator
(716) 632-1133 ext. 223



Bénoni MARTIN wrote:

Yep, as I said in my post, I tried to access remetely with Enterprise 
Manager and it work fine ... :(



-----Message d'origine-----
De : Andrew Ryan [mailto:andyryan () localnet com] Envoyé : vendredi 24 
septembre 2004 16:59 À : Bénoni MARTIN Cc : Security-Basics Objet : Re:
REMOTE sql Server Access

Are you sure that the user name you are using has permission to access the
database from your remote server?

Andrew N. Ryan
LocalNet Corp.
Programming Manager/Systems Administrator
(716) 632-1133 ext. 223



Bénoni MARTIN wrote:

 

Hi list !

I am stuck with a simple remote SQL Server 2000 access. Here is the
trouble:
     - Box A is a simple SQL Server belonging to my network and is run
with myDomainName\myNTName.
     - Box B has IIS + ASP and belongs also to my network. IIS runs as
well with myDomainName\myNTName. I try to configure its global.asa to
connect to Box A through some ASP pages. But no way, always the same error
occurs:
     " DBNETLIB][ConnectionOpen (Connect()).] This SQL Server does not
exists or your access has been denied. "

I tried with and without a DSN, tried with IP adress / hostname, tried
what i could find on the net ...

Without the DSN (seems to be the most recommended), my connection string
looks like this:
     Session("ConnectionString") = "Provider=SQLOLEDB; Data
Source=111.111111.111,1111,; uid=********: pwd=********* "

Connecting from Box B to Box A through Enterprise Manager works good
...but through ASP / global.asa, no way !

It has working so good when both SQL & IIS were on the same box, but 
as it is recommended to have two separatated boxes for security 
reasons ... :( :( :(

If someone can point me out where is my mistake ... I will appreciate
:)

Thanks in advance !

----------------------------------------------------------------------
-
---- Computer Forensics Training at the InfoSec Institute. All of our 
class sizes are guaranteed to be 12 students or less to facilitate 
one-on-one interaction with one of our expert instructors. Gain the 
in-demand skills of a certified computer examiner, learn to recover 
trace data left behind by fraud, theft, and cybercrime perpetrators.
Discover the source of computer crime and abuse so that it never 
happens again.

http://www.infosecinstitute.com/courses/computer_forensics_training.ht
m
l
----------------------------------------------------------------------
-
-----



   



 




---------------------------------------------------------------------------
Computer Forensics Training at the InfoSec Institute. All of our class sizes
are guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Gain the in-demand skills of
a certified computer examiner, learn to recover trace data left behind by
fraud, theft, and cybercrime perpetrators. Discover the source of computer
crime and abuse so that it never happens again.

http://www.infosecinstitute.com/courses/computer_forensics_training.html
----------------------------------------------------------------------------


Current thread: