SQL Connection String - Change from UID and Password to Trusted

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

Home All Forums

1
2
3
4
5

Home

Development and...

SQL and SQL Ser...

SQL Connection String - Change from UID and Password to Trusted Connection

12/9/2016 4:39 PM

Dave Colbeck

Joined: 5/6/2005

Posts: 275

SQL Connection String - Change from UID and Password to Trusted Connection

I've been the subject of a few exploits where unauthenticated users are injecting SuperUsers into my sites. Untill I can do the testing and get them upgraded to 8.x, one of the steps is to change the password of the SXQL connection, except if you are using a trusted connection. I can't seem to find instructions on setting up a trusted connection, especially in a Hosted environment. Does anyone have this documented somewhere?

-----
Cheers
Dave

12/10/2016 7:09 AM

Sebastian Leupold

www.dnnwerk.de
Joined: 3/8/2004

Posts: 46212

Re: SQL Connection String - Change from UID and Password to Trusted Connection Modified By Sebastian Leupold on 12/10/2016 7:17:45 AM

you may use option "integratedSecurity=true;" instead of uid and password. in this case, you will need to grant SQL server access to the .Net user specified in advanced settings of the Application Pool, your website is hosted in.

Cheers from Germany,
Sebastian Leupold

Speed up your DNN Websites with TurboDNN

12/10/2016 10:43 AM

Dave Colbeck

Joined: 5/6/2005

Posts: 275

Re: SQL Connection String - Change from UID and Password to Trusted Connection

Sebastian,

Thanks for the reply. Since this is a hosted environment, would I attempt to do that through SQL Management Studio? And do I use the Network Service or the App Pool (and where do I get the user for the App Pool) as the DBO?

-----
Cheers
Dave

12/11/2016 9:10 AM

Sebastian Leupold

www.dnnwerk.de
Joined: 3/8/2004

Posts: 46212

Re: SQL Connection String - Change from UID and Password to Trusted Connection

on a hosted environment, the hosting provider should have set up the Server Account to be used for you and provide a UI to manage your SQL users.

Cheers from Germany,
Sebastian Leupold

Speed up your DNN Websites with TurboDNN

Page 1 of 1

Home

Development and...

SQL and SQL Ser...

SQL Connection String - Change from UID and Password to Trusted Connection

These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
No Flaming or Trolling.
No Profanity, Racism, or Prejudice.
Site Moderators have the final word on approving / removing a thread or post or comment.
English language posting only, please.

Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

DNN Corp. (DotNetNuke)