如何使用客户端Windows凭据连接到Web中的SQL Server数据库

Question

Scenario: instead of using the server Windows credentials to connect to database, I want to use the Windows credentials from which the person is accessing website.

• IIS hosted Server IP: : 10.10.10.10
• Website Accessing from client machine : 10.10.10.11

I want to use the credentials from logged in user of 10.10.10.11 for accessing the database.

Is there any way to do that? I tried searching in google extensively and failed to get a proper answer. Please let me know how to achieve this or give me a lead so as to get this done.

Answer 1

If using Windows Authentication, you can simply use Impersonation to make the web worker process' current thread use the client's user credentials

In web.config:

<configuration>
  <system.web>
    <identity impersonate="true" />
  </system.web>
</configuration>

and make the ado.net connection use the same user by adding this property to the connection string (assuming you use SQL Server or any other DBMS supporting this option)

Integrated Security=sspi

Answer 2

Change the configuration to

<configuration>
  <system.web>
    <authentication mode="Windows"/>
    <identity impersonate="true" />
  </system.web>
</configuration>

And Go to IIS Server >> Sites >> Website>> Authentication

Anonymous Authentication >> Disabled
ASP.Net Impersonation    >> Enabled
Basic Authentication     >> Enabled
Forms Authentication     >> Disabled
Windows Authentication   >> Disabled

This will generate a popup for credentials. When credentials are entered, it will be used to connect to the database.