SQL Server DSN using a domain account to login

Report · Aug 20, 2009

This doesn't seem to work in CF8. If I use a SQL login it works fine but our production SQL servers dont use mixed mode security, its domain accounts or nothing. Does anyone have any idea how I can get a domain account set up at the CF end to use for the database login?

I need to do this per DSN as we run multiple apps on our CF server. So I can't just use the service account the CF server is running under. This is all down to the demands for "security" from our SQL DBA.

many thanks

Steve

Report · Aug 20, 2009

I suspect that if you need to use windows integrated authentication that the account used will need to be the one that the ColdFusion server runs under, but this does not sound like it's compatible with your DBA's requirements. You might also try using Microsoft's JDBC driver instead on the one bundled with CF. I'd investigate the settings available to you with Microsoft's JDBC driver. It may have more security related options then the driver provided by Adobe.

You might try using the settings described in the "SQL Server NT authentication users" section of this technote. Note that it refers to CF 7; I'm not sure if the information is applicable to CF 8.
http://kb2.adobe.com/cps/000/42dcb10a.html

Microsoft's JDBC Driver for SQL Server
http://msdn.microsoft.com/en-us/data/aa937724.aspx

http://msdn.microsoft.com/en-us/library/ms378672(SQL.90).aspx

Report · Aug 20, 2009

The integrated auth on the standard SQL driver only uses the account the CF service is running under.

The JDBC driver does the same thing.

So does any attempt to use ODBC.

have run out of things to try, so if anyone has any advice I'd be very grateful

thanks

Steve