Skip to Content

Register Login

Industry Online Support

Technical Forum

Navigation

SQL Server / MSDE Authentication

Created by: RichWargo at: 1/26/2007 2:36 PM (5 Replies)

Rating (0)

Thanks 0

6 Entries

1/26/2007 2:36 PM	Rate (0)
RichWargo Posts: 16 Rating: (0)	Greetings: I am getting pressure from a client's IT department. They are insisting that all computer on their site use Windows authentication mode for SQL Server or MSDE databases, rather than the databases' own authentication or even mixed mode. I didn't want to change anything until I checked with some experts. Can the authentication mode for the SQL Server or MSDE databases used by WinCC be set to Windows authentication only, without any negative effects?
RichWargo Posts: 16 Rating: (0)
Suggestion To thank Quote Answer

1/26/2007 8:48 PM	Rate (0)
Nemo Posts: 3149 Rating: (171)	Hi this manual will be valid for WinCC as well, perhaps it will be helpfull? http://support.automation.siemens.com/WW/view/en/22229786 nemo
Nemo Posts: 3149 Rating: (171)
Suggestion To thank Quote Answer

1/26/2007 10:03 PM	Rate (0)
RichWargo Posts: 16 Rating: (0)	Nemo: I've read through the PCS 7 Security Concept manual you recommended, but found no mention of SQL authentication in it. Rich
RichWargo Posts: 16 Rating: (0)
Suggestion To thank Quote Answer

1/29/2007 11:36 AM	Rate (0)
Salma Gold Member Joined: 9/27/2005 Last visit: 11/27/2007 Posts: 1398 Rating: (151)	You cannot set the authentication mode to Windows-only because WinCC uses two SQLServer logins to connect to it's databases. You need to leave the authentication set to mixed mode. However surely you could present an argument to the IT guys that this is not a security risk. The SQLServer logins used by WinCC have an unpublished password. You can easily ensure that no other logins are created by managing access to the database server, restricting Systems Administrator role membership and removing the link between Windows Administrator and SQL Server Systems Administrator (if necessary). I don't know enough about the security risks and preventions of SQL Server to be an authority but I believe this is a pretty common setup. Developers cannot be expected to use Windows Authentication for their code, that sounds like pretty sloppy programming to me. Just my two pennies worth Salma

Suggestion To thank Quote Answer

1/29/2007 2:27 PM	Rate (0)
RichWargo Posts: 16 Rating: (0)	Salma, thanks for your input. The issue is not one of technical merit, it is one of client capability, particularly their IT department. Like most IT departments I have had the pleasure (?) to deal with, they are not noted for their technical acumen. Someone has decreed that this yea verily shall be the way, and the way shall be Windows authentication. I'll have to do some tactful "education". I was just hoping to avoid that if possible. Thanks again for your input.
RichWargo Posts: 16 Rating: (0)
Suggestion To thank Quote Answer

1/29/2007 4:04 PM	Rate (0)
Salma Gold Member Joined: 9/27/2005 Last visit: 11/27/2007 Posts: 1398 Rating: (151)	Hi Rich Best of luck, I guess you'll need it [:P] Sorry there's not a better answer. Salma

Suggestion To thank Quote Answer

|

Share this page:

Share this page on...

Follow us on