Tuesday, February 21, 2012

Repost - Linked server security - Help!

I have 2 questions.
1. Can I map a local NT group (not a user) to a remote login (SQL account)?
(local server is SQL7, remote server is SQL 2K)
2. I kept add new login mappings from the security tab. Then I clicked OK
and closed it. No error messages. Next time when I opened the tab, it only
shows the first mapping I did. The rest disappears. I used
sp_helplinkedsrvlogin, which still does NOT show the rest. Is this a bug?
Can anyone help?
Thank you!Hi
Is this a SQL 7 instance linked to SQL 2000 or vice versa? Which version of
EM are you using to do this?
Can you use Query Analyser (sp_addlinkedsrvlogin) to add this login?
John
"Min" <Min@.discussions.microsoft.com> wrote in message
news:97B19B1E-B858-4433-8642-F9DE841DB341@.microsoft.com...
>I have 2 questions.
> 1. Can I map a local NT group (not a user) to a remote login (SQL
> account)?
> (local server is SQL7, remote server is SQL 2K)
> 2. I kept add new login mappings from the security tab. Then I clicked OK
> and closed it. No error messages. Next time when I opened the tab, it only
> shows the first mapping I did. The rest disappears. I used
> sp_helplinkedsrvlogin, which still does NOT show the rest. Is this a bug?
> Can anyone help?
> Thank you!
>|||Local server is sql 7. linked server is sql 2k. I checked the version of the
EM, which is 8.0
"John Bell" wrote:
> Hi
> Is this a SQL 7 instance linked to SQL 2000 or vice versa? Which version of
> EM are you using to do this?
> Can you use Query Analyser (sp_addlinkedsrvlogin) to add this login?
> John
> "Min" <Min@.discussions.microsoft.com> wrote in message
> news:97B19B1E-B858-4433-8642-F9DE841DB341@.microsoft.com...
> >I have 2 questions.
> >
> > 1. Can I map a local NT group (not a user) to a remote login (SQL
> > account)?
> > (local server is SQL7, remote server is SQL 2K)
> >
> > 2. I kept add new login mappings from the security tab. Then I clicked OK
> > and closed it. No error messages. Next time when I opened the tab, it only
> > shows the first mapping I did. The rest disappears. I used
> > sp_helplinkedsrvlogin, which still does NOT show the rest. Is this a bug?
> >
> > Can anyone help?
> >
> > Thank you!
> >
>
>|||Yes. I can use sp_addlinkedsrvlogin to add login, although EM still did not
show it. If I add thru EM, it will only show the first mapping. Even
sp_helplinkedsrvlogin will not show it. I have done test to prove that the
mapping was added. However neither thru EM or SP, I can see it.
> Can you use Query Analyser (sp_addlinkedsrvlogin) to add this login?
> John
> "Min" <Min@.discussions.microsoft.com> wrote in message
> news:97B19B1E-B858-4433-8642-F9DE841DB341@.microsoft.com...
> >I have 2 questions.
> >
> > 1. Can I map a local NT group (not a user) to a remote login (SQL
> > account)?
> > (local server is SQL7, remote server is SQL 2K)
> >
> > 2. I kept add new login mappings from the security tab. Then I clicked OK
> > and closed it. No error messages. Next time when I opened the tab, it only
> > shows the first mapping I did. The rest disappears. I used
> > sp_helplinkedsrvlogin, which still does NOT show the rest. Is this a bug?
> >
> > Can anyone help?
> >
> > Thank you!
> >
>
>|||Hi
You may want to check on a system that has the SQL 7 tools.
John
"Min" <Min@.discussions.microsoft.com> wrote in message
news:7290F8F4-58AD-4FFC-A4B6-E9600767D23C@.microsoft.com...
> Yes. I can use sp_addlinkedsrvlogin to add login, although EM still did
> not
> show it. If I add thru EM, it will only show the first mapping. Even
> sp_helplinkedsrvlogin will not show it. I have done test to prove that the
> mapping was added. However neither thru EM or SP, I can see it.
>> Can you use Query Analyser (sp_addlinkedsrvlogin) to add this login?
>> John
>> "Min" <Min@.discussions.microsoft.com> wrote in message
>> news:97B19B1E-B858-4433-8642-F9DE841DB341@.microsoft.com...
>> >I have 2 questions.
>> >
>> > 1. Can I map a local NT group (not a user) to a remote login (SQL
>> > account)?
>> > (local server is SQL7, remote server is SQL 2K)
>> >
>> > 2. I kept add new login mappings from the security tab. Then I clicked
>> > OK
>> > and closed it. No error messages. Next time when I opened the tab, it
>> > only
>> > shows the first mapping I did. The rest disappears. I used
>> > sp_helplinkedsrvlogin, which still does NOT show the rest. Is this a
>> > bug?
>> >
>> > Can anyone help?
>> >
>> > Thank you!
>> >
>>|||Thanks! I will check. Do you know the asnwer to my first question?
1. Can I map a local NT group (not a user) to a remote login (SQL account)?
(local server is SQL7, remote server is SQL 2K)
Thanks again.
"John Bell" wrote:
> Hi
> You may want to check on a system that has the SQL 7 tools.
> John
> "Min" <Min@.discussions.microsoft.com> wrote in message
> news:7290F8F4-58AD-4FFC-A4B6-E9600767D23C@.microsoft.com...
> > Yes. I can use sp_addlinkedsrvlogin to add login, although EM still did
> > not
> > show it. If I add thru EM, it will only show the first mapping. Even
> > sp_helplinkedsrvlogin will not show it. I have done test to prove that the
> > mapping was added. However neither thru EM or SP, I can see it.
> >
> >> Can you use Query Analyser (sp_addlinkedsrvlogin) to add this login?
> >>
> >> John
> >>
> >> "Min" <Min@.discussions.microsoft.com> wrote in message
> >> news:97B19B1E-B858-4433-8642-F9DE841DB341@.microsoft.com...
> >> >I have 2 questions.
> >> >
> >> > 1. Can I map a local NT group (not a user) to a remote login (SQL
> >> > account)?
> >> > (local server is SQL7, remote server is SQL 2K)
> >> >
> >> > 2. I kept add new login mappings from the security tab. Then I clicked
> >> > OK
> >> > and closed it. No error messages. Next time when I opened the tab, it
> >> > only
> >> > shows the first mapping I did. The rest disappears. I used
> >> > sp_helplinkedsrvlogin, which still does NOT show the rest. Is this a
> >> > bug?
> >> >
> >> > Can anyone help?
> >> >
> >> > Thank you!
> >> >
> >>
> >>
> >>
>
>|||Hi
You should be able to do this, but I don't have a system I can check it on!
In general my preference is to use NT groups wherever possible then when a
new user comes along it is part of the NT administration to set them up
(without touching the databases!).
John
"Min" <Min@.discussions.microsoft.com> wrote in message
news:80ACE6F9-9F60-471C-8E2C-A1A2D3E47534@.microsoft.com...
> Thanks! I will check. Do you know the asnwer to my first question?
> 1. Can I map a local NT group (not a user) to a remote login (SQL
> account)?
> (local server is SQL7, remote server is SQL 2K)
> Thanks again.
> "John Bell" wrote:
>> Hi
>> You may want to check on a system that has the SQL 7 tools.
>> John
>> "Min" <Min@.discussions.microsoft.com> wrote in message
>> news:7290F8F4-58AD-4FFC-A4B6-E9600767D23C@.microsoft.com...
>> > Yes. I can use sp_addlinkedsrvlogin to add login, although EM still did
>> > not
>> > show it. If I add thru EM, it will only show the first mapping. Even
>> > sp_helplinkedsrvlogin will not show it. I have done test to prove that
>> > the
>> > mapping was added. However neither thru EM or SP, I can see it.
>> >
>> >> Can you use Query Analyser (sp_addlinkedsrvlogin) to add this login?
>> >>
>> >> John
>> >>
>> >> "Min" <Min@.discussions.microsoft.com> wrote in message
>> >> news:97B19B1E-B858-4433-8642-F9DE841DB341@.microsoft.com...
>> >> >I have 2 questions.
>> >> >
>> >> > 1. Can I map a local NT group (not a user) to a remote login (SQL
>> >> > account)?
>> >> > (local server is SQL7, remote server is SQL 2K)
>> >> >
>> >> > 2. I kept add new login mappings from the security tab. Then I
>> >> > clicked
>> >> > OK
>> >> > and closed it. No error messages. Next time when I opened the tab,
>> >> > it
>> >> > only
>> >> > shows the first mapping I did. The rest disappears. I used
>> >> > sp_helplinkedsrvlogin, which still does NOT show the rest. Is this a
>> >> > bug?
>> >> >
>> >> > Can anyone help?
>> >> >
>> >> > Thank you!
>> >> >
>> >>
>> >>
>> >>
>>|||Thanks for the reply. I tried. It was mapped OK but did not work. A user
belongs to the NT group connects to the remote server as the generic account
I have (which is for everyone not in the mapping table). After couple tests,
it seems that I can only map a NT user to a remote SQL account.
"John Bell" wrote:
> Hi
> You should be able to do this, but I don't have a system I can check it on!
> In general my preference is to use NT groups wherever possible then when a
> new user comes along it is part of the NT administration to set them up
> (without touching the databases!).
> John
> "Min" <Min@.discussions.microsoft.com> wrote in message
> news:80ACE6F9-9F60-471C-8E2C-A1A2D3E47534@.microsoft.com...
> > Thanks! I will check. Do you know the asnwer to my first question?
> >
> > 1. Can I map a local NT group (not a user) to a remote login (SQL
> > account)?
> > (local server is SQL7, remote server is SQL 2K)
> >
> > Thanks again.
> >
> > "John Bell" wrote:
> >
> >> Hi
> >>
> >> You may want to check on a system that has the SQL 7 tools.
> >>
> >> John
> >>
> >> "Min" <Min@.discussions.microsoft.com> wrote in message
> >> news:7290F8F4-58AD-4FFC-A4B6-E9600767D23C@.microsoft.com...
> >> > Yes. I can use sp_addlinkedsrvlogin to add login, although EM still did
> >> > not
> >> > show it. If I add thru EM, it will only show the first mapping. Even
> >> > sp_helplinkedsrvlogin will not show it. I have done test to prove that
> >> > the
> >> > mapping was added. However neither thru EM or SP, I can see it.
> >> >
> >> >> Can you use Query Analyser (sp_addlinkedsrvlogin) to add this login?
> >> >>
> >> >> John
> >> >>
> >> >> "Min" <Min@.discussions.microsoft.com> wrote in message
> >> >> news:97B19B1E-B858-4433-8642-F9DE841DB341@.microsoft.com...
> >> >> >I have 2 questions.
> >> >> >
> >> >> > 1. Can I map a local NT group (not a user) to a remote login (SQL
> >> >> > account)?
> >> >> > (local server is SQL7, remote server is SQL 2K)
> >> >> >
> >> >> > 2. I kept add new login mappings from the security tab. Then I
> >> >> > clicked
> >> >> > OK
> >> >> > and closed it. No error messages. Next time when I opened the tab,
> >> >> > it
> >> >> > only
> >> >> > shows the first mapping I did. The rest disappears. I used
> >> >> > sp_helplinkedsrvlogin, which still does NOT show the rest. Is this a
> >> >> > bug?
> >> >> >
> >> >> > Can anyone help?
> >> >> >
> >> >> > Thank you!
> >> >> >
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>

No comments:

Post a Comment