IIS Virtual Server for SQLServer ... not authorised to view

I'm sorry if this q has already been answered, however after looking through
the posts I cannot find a resolution.
I have a W2K Pro Machine installed with IIS and SQLServer 2K (let's call
this Dev1)
I have a XP Pro Machine installed with IIS and SQLServer 2K (let's call this
Dev2)
Dev1 is used for day to day development. I have several SQL scripts to set
up a database, whereby I create a databse, 2 (two) SQL user accounts, some
Views, several stored procedures, and populate with some initial data. -No
problems so far.
I use the "Configure SQL XML Support in IIS" menu option and I do just that,
i.e. I set up a VDir with a sub directory for my templates (xml files) which
contain stuff for calling the stored procedures formatting the returned data
etc. I configure the VDir security method to use one of the SQL user accounts
that I have created in my SQL script. Using my IE browser, I navigate to the
templates dir and retrieve the data as expected.-No problems so far.
Now, I want to take this stuff and show to a client, so I want to install it
on my laptop (Dev2). I follow the exact same routine as for Dev1, however
when I come to view the data in my browser, I get
HTTP 401.1 Unauthorized: Logon Failed
I cannot for the life of me figure out the difference. As far as I can tell,
everything is the same except for Dev2 has XP Pro and Dev1 has 2K Pro.
Can somebody please help me out with this ... and tell me what other info
you need to know.
Thanks in advance.
Hmmm...You have ensured that Dev2 allows Sql Logins and not just windows,
correct? And that the account is properly set up with permission on the
right database, tables, etc?
Thanks,
Irwin
Irwin Dolobowsky
Program Manager, SqlXml
http://blogs.msdn.com/irwando
This posting is provided "AS IS" with no warranties, and confers no rights.
"billr" <billr@.discussions.microsoft.com> wrote in message
news:B784272C-D070-4C8A-89F4-4CB64072D710@.microsoft.com...
> I'm sorry if this q has already been answered, however after looking
> through
> the posts I cannot find a resolution.
> I have a W2K Pro Machine installed with IIS and SQLServer 2K (let's call
> this Dev1)
> I have a XP Pro Machine installed with IIS and SQLServer 2K (let's call
> this
> Dev2)
> Dev1 is used for day to day development. I have several SQL scripts to set
> up a database, whereby I create a databse, 2 (two) SQL user accounts, some
> Views, several stored procedures, and populate with some initial data. -No
> problems so far.
> I use the "Configure SQL XML Support in IIS" menu option and I do just
> that,
> i.e. I set up a VDir with a sub directory for my templates (xml files)
> which
> contain stuff for calling the stored procedures formatting the returned
> data
> etc. I configure the VDir security method to use one of the SQL user
> accounts
> that I have created in my SQL script. Using my IE browser, I navigate to
> the
> templates dir and retrieve the data as expected.-No problems so far.
> Now, I want to take this stuff and show to a client, so I want to install
> it
> on my laptop (Dev2). I follow the exact same routine as for Dev1, however
> when I come to view the data in my browser, I get
> HTTP 401.1 Unauthorized: Logon Failed
> I cannot for the life of me figure out the difference. As far as I can
> tell,
> everything is the same except for Dev2 has XP Pro and Dev1 has 2K Pro.
> Can somebody please help me out with this ... and tell me what other info
> you need to know.
> Thanks in advance.
>
|||Yes, I have,
I use exactly the same sql script to create the user accounts and the
database,
SQLaccount1 owns all stored procedures, views and tables
SQLaccoutn2 is granted executable permissions on the relevant stored procs
When I create the vdir I select to use SQL Server login details, and I enter
the details for SQLaccount2. Then I can select the database from the list in
the IIS configuration tool so I know it is not a problem with SQL
authentication.
If I inspect the virtual dir using the IIS snapin, on both machines the
details are exactly the same ... I select the DirectorySecurity tab and
select the Anonymous access and authentication button, and in the dialog that
pops up I can see that Anonymous access is enabled, the username text box is
empty and the option to Allow IIS to control passwword is selected.
"Irwin Dolobowsky [MS]" wrote:

> Hmmm...You have ensured that Dev2 allows Sql Logins and not just windows,
> correct? And that the account is properly set up with permission on the
> right database, tables, etc?
> --
> Thanks,
> Irwin
> Irwin Dolobowsky
> Program Manager, SqlXml
> http://blogs.msdn.com/irwando
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "billr" <billr@.discussions.microsoft.com> wrote in message
> news:B784272C-D070-4C8A-89F4-4CB64072D710@.microsoft.com...
>
>

IIS security problem

Hi,
I have IIS5.0 running on w2k (SP3) for SQL reporting service(SP1). IIS has all the patches that I can find. While IIS running, this computer has been hijacked or turn to proxy server to deliver spam mails. How can I provent it (no smpt service running.)I am not sure I understand the issue you're facing, can you explain some
more?
--
Tudor Trufinescu
Dev Lead
Sql Server Reporting Services
This posting is provided "AS IS" with no warranties, and confers no rights.
"csoon" <csoon@.discussions.microsoft.com> wrote in message
news:C14F67AF-AA2D-4529-BF58-E170171B0410@.microsoft.com...
> Hi,
> I have IIS5.0 running on w2k (SP3) for SQL reporting service(SP1). IIS
has all the patches that I can find. While IIS running, this computer has
been hijacked or turn to proxy server to deliver spam mails. How can I
provent it (no smpt service running.)|||Note that you do not need to have either an email client nor an email server
running. There would be no way for your server to be hijacked if you do not
have these installed. Yes, you can use either but you do not need to. I am
configured where RS sends the email to an SMTP server which resides
elsewhere.
Bruce L-C
"csoon" <csoon@.discussions.microsoft.com> wrote in message
news:CFC072A9-A3E9-46A2-BDAF-ECD7BE320BB9@.microsoft.com...
> I keep getting email indicate that my computer was hijack and used as
proxy server to deliver hugh emails while IIS5.0 running. It is very
difficult to get budget to try sql reporting service specially it is not
secure. First I did implement sending email in sql reporting service by
changing in configuration file (drop off email files in a folder to smtp to
pick them up). Once I had this problem then I turned off smtp but I still
got emails indicated that my computer was hijacked. I installed lock down
IIS and all the patch for IIS5.0. I would like to try RS but if I still
cause problem to others, I might not be able to test or implement this
software. If you need more info. please let me know.
> "Tudor Trufinescu (MSFT)" wrote:
> > I am not sure I understand the issue you're facing, can you explain some
> > more?
> >
> > --
> > Tudor Trufinescu
> > Dev Lead
> > Sql Server Reporting Services
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> >
> > "csoon" <csoon@.discussions.microsoft.com> wrote in message
> > news:C14F67AF-AA2D-4529-BF58-E170171B0410@.microsoft.com...
> > > Hi,
> > > I have IIS5.0 running on w2k (SP3) for SQL reporting service(SP1).
IIS
> > has all the patches that I can find. While IIS running, this computer
has
> > been hijacked or turn to proxy server to deliver spam mails. How can I
> > provent it (no smpt service running.)
> >
> >
> >|||Thanks. Unfortunately, this is a test on my computer, I have to have mail client on this computer.
"Bruce Loehle-Conger" wrote:
> Note that you do not need to have either an email client nor an email server
> running. There would be no way for your server to be hijacked if you do not
> have these installed. Yes, you can use either but you do not need to. I am
> configured where RS sends the email to an SMTP server which resides
> elsewhere.
> Bruce L-C
> "csoon" <csoon@.discussions.microsoft.com> wrote in message
> news:CFC072A9-A3E9-46A2-BDAF-ECD7BE320BB9@.microsoft.com...
> > I keep getting email indicate that my computer was hijack and used as
> proxy server to deliver hugh emails while IIS5.0 running. It is very
> difficult to get budget to try sql reporting service specially it is not
> secure. First I did implement sending email in sql reporting service by
> changing in configuration file (drop off email files in a folder to smtp to
> pick them up). Once I had this problem then I turned off smtp but I still
> got emails indicated that my computer was hijacked. I installed lock down
> IIS and all the patch for IIS5.0. I would like to try RS but if I still
> cause problem to others, I might not be able to test or implement this
> software. If you need more info. please let me know.
> >
> > "Tudor Trufinescu (MSFT)" wrote:
> >
> > > I am not sure I understand the issue you're facing, can you explain some
> > > more?
> > >
> > > --
> > > Tudor Trufinescu
> > > Dev Lead
> > > Sql Server Reporting Services
> > > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > >
> > >
> > > "csoon" <csoon@.discussions.microsoft.com> wrote in message
> > > news:C14F67AF-AA2D-4529-BF58-E170171B0410@.microsoft.com...
> > > > Hi,
> > > > I have IIS5.0 running on w2k (SP3) for SQL reporting service(SP1).
> IIS
> > > has all the patches that I can find. While IIS running, this computer
> has
> > > been hijacked or turn to proxy server to deliver spam mails. How can I
> > > provent it (no smpt service running.)
> > >
> > >
> > >
>
>