Confused about which webserver to use(closed gave up)

Still really new at this and quite confused. I want to build a web app that the person fills out a form and it saves in my sql database. When I am using VS, I have my local webserver and the live webserver. DO I build this app using my local or the live webserver? Can I test it from my local machine on the live webserver or do I need to move the app there first? It seems if I try to use the live webserver and SQL I always get the "Login failed for user 'null" and the only time I have had any success is using the local IIS. I am unsure of what I should be using to build and how to change it to the live server. Lots of help would be appreciated, lol.

I can get a windows app built and running in seconds with an sql connection so the only difference is the web server part and the security. I dont know if theres a guide or a walkthru to get a first app up that includes the security or not but if someone knows one, please let me know. I have alot of books on web apps but they all just code the app and then say hit run and expect them to run. None talk about what security needs to be set up.

Here is one I am starting on - http://www.asp101.com/

Its also another Internet.com site. :)

I have been googling and there seems to be some speculation that windows 2003 causes some extra problems with the security. RIght now I have the impersonate = true in my webconfig, aspnet/IIS_WPG/IUSR_WEBSERVER all have owner access and still have the error.

All the lessson at www.asp101.com are covered in the book I have MCAD/MCSD Developing and Implementing Web Applications with VB and VS .NET. They basically cover building the app, the controls and such but they all just want you to run the app without changing anything on your SQL or webserver which is what is missing. RIght now I just doing a simple dataform wizard to Northwind database and I still am stuck at the login failed. Surely someone, somewhere has written an asp app and gone through this same hell.

I just found that on the SQL/WEBSERVER (windows 2003) that in the windows components under applications that the asp.net was not installed. SO I installed it and now have a new error. SQL server does not exist or access denied.

Damn, it was cause the sql server engine was stopped, back to the login failed.

Why would I get the "Login failed for user 'null" and yet when I go the dataadapter and configure and do a preview data, it works for that.

Not sure as I am just getting into the same thing today. Still have to configure the sql server on the host site so almost there.

Great, please let me know what happens. I can't see us being the first two people in this forum to setup a web application on a live server. The data adapter can preview yet when I run the program in debug and step through, its the connection open that fails.

Heres a great article that i used http://www.asp.net/faq/AspNetAndIIS6...ndex=0&tabid=1

Thanks for the link. I am running Server 2003 and ASP.NET 1.1 :thumb:

Yes I am running server 2003 and asp net 1.1.4322.0. You can find the version by using the aspnet_regiis -lv command at the command prompt. You may have to go the directory usually c:\winnt\microsoft .net\framework\whateverversion.

I think this is why I am not able to remotely develop web apps from my system to my server, its probably not configured correctly.

Ok heres exactly what i am doing, its quick so if someone can help that would be great.

1. New project, in the add new item select Data form Wiz. CLick next on welcome.
2. Create a new dataset named dsCustomers and click next.
3. Build a connection to the sql server on a different box. I am not using local SQL.
4. Choose the northwind database.
5. Click ok to create the connection and on the choose table, choose Customers.
6. Go to the Finish.
7. CHoose this page as start up and run the project.

For me, this is the part where i watch it fail.

ANy luck RobDog888? ANyone else can try it too please, the more help the merrier. I just cant get my head around my a windows app will work fine. Take the same easy thing of just a dataform wiz in asp.net and suddenly all these problems. The adapter can preview so there should not be any problems yet there are. Desperately seeking help.

Are you specifying a user/password in your connection string?
What security setting is your SQL set for? (intergrated or windows or both)

I thought if you just add the user to the web.config file its considered as integrated login?

Quote:

---

Originally Posted by RobDog888

I thought if you just add the user to the web.config file its considered as integrated login?

---

I believe the answer to that is it'll use the aspnet user account, which if your useing intergarted won't make a difference. If you using windows then you'll need to set access for the aspnet user.

Integrated login is th Windows authentication and that makes sense about the ASPNET_USER user account.

You know what I mean :p

-TPM- Thank you for the response. The SQL server is set for Windows ONly. I do have the ASPNET account setup with full access to the database. My connection string that was generated by the dataform wiz is:

Me.OledbConnection1.ConnectionString = "Integrated security=SSPI;packet size=4096;data source=""WEBSERVER"";Tag with column collation when possible=False;initial catalog=Northwind;Use Procedure for Prepare=1;Auto Translate=True;Persist Security Info=False;Provider=""SQLOEDB.1"";workstation id=""IMOWORK;Use Encryption for Data=False"

My app that I actually trying myself, the connection string is:

Dim strConnString As String = "workstation id=""IMOWORK"";packet size=4096; integrated security=SSPI;data source=""WEBSERVER"";persist security info=False;initial catalog=Webtest"

The only change I have made to my webconfig was to add the identity impersonate=true. In the end, all I want is anyone on the net to be able to fill out a form and save it to my sql.

Aaah ok, so I checked up on identity impersonate=true, turns out it replaces the default aspnet user with the clients credentials (probably anonymous), I think you should either take it out, or use something like this: <identity impersonate="true" userName="joeblow" password="123456" />

Since I have the aspnet account should I be using it there? If so, I guess I go set the account password first, because how will I know what it is?

If you want to use the aspnet user just take out the impersonate=true.

I removed the impersonate and changed the sql server authentication to Windows and SQL and still same login failed problem. ANy ideas?

Hmm I'm pretty sure the aspnet user is set as a local user, when added aspnet to you SQL did you use the aspnet user from the web server?

My SQL is on the same server(WEBSERVER) as the IIS. So I use the account WEBSERVER/ASPNET and I put it in the northwind database and put in the owner group so it should have full access.

Ok, what if you try SQL authentication? Does that work? (I.E use sa in the connection string)

I am sorry I am very new to the web side. Can you give me a quick example, say my password was test?

I tried this:

Me.OledbConnection1.ConnectionString = "Integrated security=SSPI;packet size=4096;data source=""WEBSERVER"";Tag with column collation when possible=False;initial catalog=Northwind;Use Procedure for Prepare=1;Auto Translate=True;Persist Security Info=False;Provider=""SQLOEDB.1"";workstation id=""IMOWORK;User ID=sa;pwd=test;Use Encryption for Data=False"

and recieved the same error - Login failed for user 'null', Not associated with a trusted SQl server connection.

Oh it's a trusted connection. in that case try this:
Me.OledbConnection1.ConnectionString = "Server=WEBSERVER;Database=Northwind;Trusted_Connection=True"

Odd it says user "null", did you delete 'identity impersonate=true' or set it to false?

Just on a note, if you are doing impersonation, you should persist the security info.

Persist Security Info=True;

Just a couple of quick questions since I am spinning here. IS it Server=WEBSERVER or data source=WEBSERVER? Also Database=Northwind or initial catalog=Northwind? WHen I am doing this Trusted Connection, am I still impersonating?

Ok, got some different errors about ole, so here is the string I have now and I have the error - Login Failed for ASPNET

Me.OledbConnection1.ConnectionString =data source=WEBSERVER;initial catalog=Northwind;Provider=""SQLOEDB.1"";Trusted_Connection=True;Persist Security Info=False"

Quote:

---

Originally Posted by Beast777

Just a couple of quick questions since I am spinning here. IS it Server=WEBSERVER or data source=WEBSERVER? Also Database=Northwind or initial catalog=Northwind? WHen I am doing this Trusted Connection, am I still impersonating?

---

I think either way is fine.

Quote:

---

Originally Posted by Beast777

Ok, got some different errors about ole, so here is the string I have now and I have the error - Login Failed for ASPNET

Me.OledbConnection1.ConnectionString =data source=WEBSERVER;initial catalog=Northwind;Provider=""SQLOEDB.1"";Trusted_Connection=True;Persist Security Info=False"

---

Is that exactly how you have it?

Well here I am at a new error, any suggestions?

If thats exactly as you have it the reason it's not working is because of the "s you have. You'd want to do this; Me.OledbConnection1.ConnectionString =data source=WEBSERVER;initial catalog=Northwind;Provider='SQLOEDB.1';Trusted_Connection=True;Persist Security Info=False"

I tried that it still is the same. I would like to thank everyone who has helped so far. I feel alot closer to a solution now. Hopefully, we can get that last part solved.

I removed the identity impersonate in the web config just to see what it would do and I get the exact same error.

I just created a user called test with password Password123. I added the user to the sql and gave the user full rights to the SQL northwind database. I then editted the connection string and added uid='test;pwd='Password123'. This of course failed and told me login failed for user test. I then tried adding the domain to the uid and same results. I have no idea what to try next, anyone?

I think my biggest problem is that I am unsure of how the security and authentication all fits together. I keep using the webconfig impersonate, the connectionstring with uid and pwd, add multiple logins on the sql, and never really being sure whether I am in windows, mixed mode, or what ever else modes there are. What I would like is for any user to be able to open the webpage and save it to the sql. ANy ideas on what settings I should have for all of the above? Or if you know of a webpage that describes how to setup for anom users, intranet users, and pers you want to authenticate - I am sure they are all different.

I found a really nice webpage on how to determine who is running the page. Its at http://support.microsoft.com/kb/315736/EN-US/ and it basically uses this code

VB Code:

Imports System.Security
                        
Add the following code to the Page_Load event procedure:Dim authUserName As String
Dim aspUserName As String
authUserName = User.Identity.Name
aspUserName = Principal.WindowsIdentity.GetCurrent.Name
authUserPrincipalLabel.Text = "You are: " & authUserName
aspPrincipalLabel.Text = "This page runs as: " & aspUserName

When I run it on my server I get, no authUserName but the page runs as NT AUTHORITY/ NETWORK SERVICE. Does this help anyone help me get any further? I think I am drowning here.