Select to view content in your preferred language

ArcGIS Server 10 security settings > security store

1719
4
12-20-2011 08:47 PM
KiranShakya
Emerging Contributor
I am having some issue setting up security stores in remote SQL server.  I am using ArcGIS Server 10 with sp3 and SQL server 2008.

At first I did Security > settings > configure (button) > SQL Server (select option) and
typed the IP address of remote SQL Server xxx.xxx.xxx.xxx, it shows following error "Login failed for user \'NT AUTHORITY\ANONYMOUS LOGON\'."

After that, I creaded a user "kiran" (granted dbcreator) in remote SQL server (which is same local user to logon ArcGIS Server Manager) with same password as in ArcGIS Server (kiran is a GIS WebService account). Again Security > settings > configure (button) > SQL Server (select option) and typed the IP address of remote SQL Server xxx.xxx.xxx.xxx, it shows following same error "Login failed for user \'NT AUTHORITY\ANONYMOUS LOGON\'." :confused:

Then I did "GIS server post installation", made my domain user as GIS WebService account, added the domain user to remote sql server, granted dbcreater.  Still the problem is same. :mad:

So what is the solution to connect remote SQL server 2008 from security settings ??  Most of the helps only deals with SQLExpress.  Is there any help for remote sql server connection.

Thank you in advence.

Kiran
0 Kudos
4 Replies
nicogis
MVP Alum
see http://msdn.microsoft.com/en-us/library/ms160330.aspx

Ports used by the database server are open. If you are accessing SQL Server relational databases on external computers, or if the report server database is on an external SQL Server instance, you must open port 1433 and 1434 on the external computer. Be sure to restart the server after you open ports.
0 Kudos
ErikEngstrom
Frequent Contributor
You've probably already found the solution... But you need to add the "Anonymous" or "Anonymous Logon" user within SQL Server Management Studio.
After you have done this, TEMPORARILY grant the anonymous user DBCREATOR permissions.

This should allow you to connect.
0 Kudos
harleypowers_parks
Regular Contributor
I am having a similar issue. however, the solution to TEMPORARILY grant the anonymous user DBCREATOR was not the route I took. As soon as I added the Anonymous User, I was able to at least see SQLServer. I used a user name that would be the Database owner and temporarily granted dbcreator and sysadmin.  which i removed after the database and tables were created. 


Can we come up with a better solution, or is this the only work around?
documentation indicates the proper operation is that the credentials used are the application pool identity... at somepoint, then the user logged into manager is used.
Anonymous logon is not acceptable for production.

[ATTACH=CONFIG]14161[/ATTACH]
0 Kudos
Jose_MiguelZambrana
New Contributor
Hi, I had the same problem, and searching for the web I tested 3 or 4 solutions, but nothing worked.

Finally, the simple thing and no one tells is this:

1.- Login into SQLServer (must have sysadmin role)
2.- Go to folder Security, and add new login. The Login -New windows will show up
3.- Select the Item "General", and click on buttom Search for Login name (The option Windows authentication must be selected)
4.- In the windows Select User or Group, click on button Advanced
5.- Verify the item "From this location:", it must have the name of your server e.g. SERVER_SQLSERVER
6.- Click on Find Now
7.- The list of all local users of the server will show up, select the user ANONYMOUS LOGON and click Ok.
8.- Click Ok, and the user ANONYMOUS now is added.

After doing this, the problem is solved.

I used this configuration:

ArcGIS Server 10 on Windows 7
SQLServer on Windows Server 2008 R2

I hope this help for you guys.

Regards.

Jose Miguel Zambrana.
0 Kudos