Click here to Skip to main content
15,907,910 members
Home / Discussions / Database
   

Database

 
GeneralDatabase Compare Pin
Ganjah78625-Feb-04 12:34
Ganjah78625-Feb-04 12:34 
GeneralRe: Database Compare Pin
Bill Dean26-Feb-04 1:32
Bill Dean26-Feb-04 1:32 
GeneralRe: Database Compare Pin
Ganjah78626-Feb-04 11:41
Ganjah78626-Feb-04 11:41 
GeneralRe: Database Compare Pin
gpa20001-Mar-04 20:24
gpa20001-Mar-04 20:24 
GeneralMS SQL Greek Lettering, collation and unicode 1200 Pin
Spanky325-Feb-04 11:59
Spanky325-Feb-04 11:59 
GeneralRe: MS SQL Greek Lettering, collation and unicode 1200 Pin
Jeff Varszegi29-Feb-04 2:15
professionalJeff Varszegi29-Feb-04 2:15 
GeneralRe: MS SQL Greek Lettering, collation and unicode 1200 Pin
Anonymous29-Feb-04 2:31
Anonymous29-Feb-04 2:31 
GeneralQuestion about Distributed security for DAL... Pin
jamauss25-Feb-04 9:13
jamauss25-Feb-04 9:13 
I thought I would post this question here since it's a pretty good community of experts.

The application I am in charge of architecting is an ASP.NET (intranet) web application running on IIS 5 or better - targeted towards .NET environments on Windows 2000 Server and/or Windows 2003 Server. It needs to be able to scale to meet the demand of hundreds or thousands of users (ie. work in a “web farm” environment). I have to be able to support both Oracle and SQL Server as the database that stores the data for the application. Security is an important concern since the application would be getting deployed within organizations that take security fairly seriously. I can count on at least Windows 2000 and at least IE 5.5 being on the desktop, though I’m not sure if the particular browser used to access the application should be much of a concern or not in terms of security.

Ok, so here’s what I had in mind:

Browser --> IIS --> ASP.NET --> Enterprise Services/COM+ --> SQL Server/Oracle

(my thinking is that my data access code would run in the context of a COM+/ES component)

I would like to be able to use Impersonation so that I could run the COM+ component under a certain user account (for my app only) and use Trusted_Connection in my connection string to SQL Server/Oracle (with OSAuthent=1; for the Oracle OLEDB driver). My reasons for wanting to do this are that 1) it seems to me like the most secure way to implement the connection and 2) I could use Windows to handle authentication instead of writing my own code to do so.

Some questions/concerns I have:

  1. I don’t hear much mention of using this impersonation technique with COM+/ES components. Is it just not well known or are there drawbacks I don’t know about?
  2. I’ve been reading some newsgroup posts and it sounds like when using Impersonation you lose performance gained by connection pooling. Does anyone know if this is true or false?
  3. If the Oracle database is hosted on Unix or Linux, is it still possible to connect using Impersonation?
  4. Should I look at implementing transport-level security (like SSL) when the users authenticate to IIS?
  5. Anything else I should be thinking about in regards to the tiers/architecture of this application?

Thanks in advance for any time & energy you can lend to me on this. Feel free to use this in your blog (if you have one) if you think it would help get more suggestions from readers or anything like that.

Thanks,
Jason Mauss
GeneralRe: Question about Distributed security for DAL... Pin
ian mariano26-Feb-04 1:48
ian mariano26-Feb-04 1:48 
GeneralData Parameters Pin
Robert Gronenthal24-Feb-04 16:12
Robert Gronenthal24-Feb-04 16:12 
GeneralRe: Data Parameters Pin
Bill Dean24-Feb-04 16:51
Bill Dean24-Feb-04 16:51 
GeneralRe: Data Parameters Pin
Robert Gronenthal24-Feb-04 16:56
Robert Gronenthal24-Feb-04 16:56 
GeneralRe: Data Parameters Pin
Bill Dean24-Feb-04 17:05
Bill Dean24-Feb-04 17:05 
QuestionCan you create tables from dataset/tables? Pin
Rebur24-Feb-04 14:14
sussRebur24-Feb-04 14:14 
AnswerRe: Can you create tables from dataset/tables? Pin
Not Active24-Feb-04 15:54
mentorNot Active24-Feb-04 15:54 
AnswerRe: Can you create tables from dataset/tables? Pin
RChin25-Feb-04 7:08
RChin25-Feb-04 7:08 
GeneralSimple question that is KILLING me!!! Pin
HarleyJase24-Feb-04 9:24
HarleyJase24-Feb-04 9:24 
GeneralRe: Simple question that is KILLING me!!! Pin
Edbert P24-Feb-04 11:28
Edbert P24-Feb-04 11:28 
GeneralRe: Simple question that is KILLING me!!! Pin
HarleyJase24-Feb-04 12:09
HarleyJase24-Feb-04 12:09 
GeneralRe: Simple question that is KILLING me!!! Pin
Edbert P24-Feb-04 17:34
Edbert P24-Feb-04 17:34 
GeneralRe: Simple question that is KILLING me!!! Pin
HarleyJase25-Feb-04 5:06
HarleyJase25-Feb-04 5:06 
GeneralRe: Simple question that is KILLING me!!! Pin
HarleyJase25-Feb-04 5:20
HarleyJase25-Feb-04 5:20 
GeneralRe: Simple question that is KILLING me!!! Pin
Edbert P25-Feb-04 11:37
Edbert P25-Feb-04 11:37 
GeneralRe: Simple question that is KILLING me!!! Pin
HarleyJase26-Feb-04 7:05
HarleyJase26-Feb-04 7:05 
GeneralRe: Simple question that is KILLING me!!! Pin
Edbert P26-Feb-04 11:01
Edbert P26-Feb-04 11:01 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.