From: "Geo" 

"Ellen K."  wrote
in message news:ilmov0pn9spdf73i2f23smm6cb0cjtee4j{at}4ax.com...

> example I have all my SQL Servers set to use Windows authentication, if
> we start doing web apps I hafta figure out how to do the security.   (I
> asked about this awhile back and Rich mentioned that it is possible for
> one server to pass on its authentication to another,

When you setup a website to access an SQL server it's usually done via a
DSN, the DSN is configured on the web server and when you configure it you
can set it to login with a certain user/password this account information
can be SQL user/password or it can be a domain user account. It works
great.

The other way I've seen it done is you setup the SQL server with a web
service on the same machine, that web service then logs into SQL with a
machine specific user account or accounts and the web service makes the
security decision of which is used to access it based on how a user
responds to a security requirement.

Geo.

--- BBBS/NT v4.01 Flag-5