且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

如何配置s-s-rS不使用我的Windows登录名和密码?

更新时间:2023-01-02 10:51:17

是,将它设置为使用模拟/委派凭据。

您将必须配置Web应用程序使用集成身份验证,然后设置在配置文件中正确的属性。

 <身份验证模式=窗口/>
    <身份冒充=真/>

如果做这样一来,每个用户将要访问使用自己的用户名和密码数据库,所以你要适当地设置安全。这意味着创建


  • NT集团 - 将用户添加到该组

  • 登录服务器 - 组创建一个DB登录

  • DB用户 - 创建一个数据库用户的登录

  • DB角色 - 创建一个数据库角色,并将其分配到登录

  • 权限 - 为角色对数据库对象需要的权限

The way s-s-rS in my project works, it requires my Windows User Login and password in the web.config file of the ASP.NET application which calls the reports. This is a problem since i have to change the password every 90 days as a security measure. Is it possible to configure s-s-rS without any employees Login and password ?

This is the part that worries me

<add key="ReportServerUsername" value="me" />
<add key="ReportServerPassword" value="my password" />
<add key="ReportServerDomainname" value="my domain />

Yes, set it up to use impersonated/delegated credentials.

You will have to configure the web application to use integrated authentication, then set the correct attribute in the config file.

    <authentication mode="Windows"/>
    <identity impersonate="true"/>

If done this way, each user will be accessing the database using their own username and password, so you will want to set up security appropriately. This means creating

  • NT Group - Add users to this group
  • Server Login - Create a DB login for the group
  • DB user - create a db user for the login
  • db role - create a db role, and assign it to the login
  • Permissions - give the role the needed permissions on database objects