简体繁体 English

如何在没有Windows身份验证的情况下使用Active Directory用户在SQL SERVER 2008中进行身份验证

[英]How i can authenticate in SQL SERVER 2008 with Active Directory User but without Windows Authentication

原文 2016-12-27 16:14:42 1 1 sql-server/ sql-server-2008/ authentication/ active-directory

after reviewing a lot on the internet, I can not find a solution. 经过互联网上的大量审查后，我找不到解决方案。 I hope you understand me, my English is not the best ... 希望你能理解我，我的英语不是最好的...

Issue: 问题：

I want to authenticate against SQL Server with a valid user for the domain (active directory) which I get it from the login (username and password) of my application (old application). 我想使用域（活动目录）的有效用户对SQL Server进行身份验证，该用户是从我的应用程序（旧应用程序）的登录名（用户名和密码）获得的。 This user, which is logged into my application, is a user validated by Active Directory (LDAP) and is a member of a Group that has logging permissions on the SQL Server ("Domain \\ Group_name"). 登录到我的应用程序中的该用户是通过Active Directory（LDAP）验证的用户，并且是对SQL Server具有日志记录权限的组（“域\\ Group_name”）的成员。

Attempts: 尝试：

So the problem is that if I use windows authentication (it works fine) I would be using the windows user and not the application user (it is not always the same user). 所以问题是，如果我使用Windows身份验证（工作正常），我将使用Windows用户而不是应用程序用户（它并不总是同一用户）。 On the other hand, if I use SQL Server authentication I have to create and maintain the passwords of these users separately from the domain ... 另一方面，如果我使用SQL Server身份验证，则必须与域分开创建和维护这些用户的密码。

Question: 题：

How do I authenticate to SQL Server with a user logged in to my application. 如何使用登录到我的应用程序的用户向SQL Server进行身份验证。 User who is a member of a Domain Group, which has logging permission in SQL Server but is not always the user windows logued on? 是域组成员的用户，该域组在SQL Server中具有日志记录权限，但是否总是登录用户窗口？

EXAMPLE: 例：

Users: usr1 and usr2 both valid domain users 用户： usr1和usr2都是有效的域用户

Usr1 is a member of the group that has access to SQL Server. Usr1是有权访问SQL Server的组的成员。

Usr2 is NOT a member of the SQL Server access group (can not log in). Usr2 不是 SQL Server访问组的成员（无法登录）。

I want to log in Windows with usr2 and in the application with usr1 . 我想使用usr2登录Windows，并使用usr1登录应用程序 。 Both with domain credentials. 两者都具有域凭据。

Thanks in advance. 提前致谢。