Form Based Authentication in SQL Server 2012

Hi Everyone,
Please can anyone provide me the document or the link which explain step by step procedure for configuring FBA on MS SQL Server 2012 SP1.
If let's say I have FBA enabled ASP.NET application, can I use same user database for SQL Server FBA configuration or not? and can I integrate the report in this application.
Any help would be appreciated.
Thanks
Swapnil

Hi Swapnil,
Reporting Services provides an extensible architecture that allows us to plug in custom or forms-based authentication modules. Forms Authentication is a type of ASP.NET authentication in which an unauthenticated user is directed to an HTML form. Reporting
Services can be extended to support Forms Authentication using the security extensibility interfaces available through the Reporting Services API. If you extend Reporting Services to use Forms Authentication, use Secure Sockets Layer (SSL) for all communications
with the report server to prevent malicious users from gaining access to another user's cookie.
For more information about Forms Authentication in Reporting Services, please see:
Configure Custom or Forms Authentication on the Report Server
Authentication in Reporting Services
Hope this helps.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

Similar Messages

Forms Based Authentication in Project Server 2013

Hi,
I have created a PWA web app with SQL Forms Based Authentication. I am able to login and able to see the Project Center page.
But the Project Center Web Part is not getting displayed. Also facing the same issue while
Enterprise Custom Fields and Look up page,
the page is blank
When user tries to edit user in Manage Users page under Security, that page is also blank
Projects ribbon doesn't show up
User not able to create projects
Kindly provide some pointers for the same.
Thanks & regards,
Divyang Agrawal

Hi Kirtesh,
Thanks for the response.
The issue here is not related to hardware, but it is regarding the user not having appropriate rights to do the above mentioned operations.
Are there few more steps that are required for the FBA, where a user needs to be given access rights explicitly.
The users I have used for now have been added to administrator's group and have full rights on the system.
Also, when I try to create a Project in the instance using the CSOM code and passing the user's credentials who is a part of Administrator Group., it gives me a 403 forbidden exception.
Kindly provide some inputs for the same.
Regards,
Divyang Agrawal

Role based Measures in SQL Server 2012 Standard Edition

my use case: user 1 should have access only to Unit/Qty Measures and user 2 should have access to both - Qty AND $$ Amt measures. I CANT use Perspectives since im on Standard Edition.
Is there a workaround to hide a Measure based a user Role?

Step1 - Create new role for User 1
Step2 - Check then enable read permission box on the Cell Data tab in the role editor
Step3 - Enter the following expression into the Allow Reading of Cube Content box
[Measures].CurrentMember IS [Measures].[Unit/Qty]

Form Based Authentication in SharePoint 2013: Getting The remote server returned an error: (500) Internal Server Error

Hi
I configured forms based authentication mode in Sharepoint 2013 site. When i tried to log in with windows authentication prompt it throws the following error
The remote server returned an error: (500) Internal Server Error
[WebException: The remote server returned an error: (500) Internal Server Error.] System.Net.HttpWebRequest.GetResponse() +8548300 System.ServiceModel.Channels.HttpChannelRequest.WaitForReply(TimeSpan timeout) +111 [ProtocolException:
The content type text/html; charset=utf-8 of the response message does not match the content type of the binding (application/soap+msbin1). If using a custom encoder, be sure that the IsContentTypeSupported method is implemented properly. The first
1024 bytes of the response were: '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
How to fix this issue?
Regards,
Siva

Did you create a new web application or modify an existing web application?
I would start by checking the ULS logs, maybe there is an incorrect setting within one of the web.config files, or SQL permissions.
Also, as suggested above, check application pools are running.
This blog post is a great guide for setting up FBA, check it through to make sure you haven't missed any steps:
http://blogs.technet.com/b/ptsblog/archive/2013/09/20/configuring-sharepoint-2013-forms-based-authentication-with-sqlmembershipprovider.aspx

Users using Windows Authentication unable to login after upgrade to SQL Server 2012 SP2 CU1

We upgraded from SQL Server 2008 R2 to SQL Server 2012 SP2 CU1. Upgrade was successful. Users that have SQL Server Management Studio 2012 can successfully log in via Windows Authentication, but users with an older version of SQL Server Management
Studio are unable to log in via Windows Authentication.
The error they receive is listed below:
Connect not connect to XXXXXXX
Login Failed. The login is from an untrusted domain and cannot be used with Windows Authentication.
(Microsoft SQL Server, Error: 18452)
If we switch to Mixed authentication, users can log in via SQL Server Authentication.
Our security policy prohibits SQL Authentication.
Outside of having the staff upgrade to SQL Server 2012 SQL Server Management Studio, is there any setting I can set/unset to allow older version of SQL Server Management studio to connect to SQL Server 2012?
Thanks.
DJ

Glad to see that you were able to resolve the issue yourself, but for the curious, could you explain what this
Extended Protection is?
Erland Sommarskog, SQL Server MVP, [email protected]

SQL Server 2012 (Server Authentication), Is it possible to add Server Authentication after a Windows Authentication installation

I installed SQL Server 2012 to use Windows Authentication. An the tool I'm using to replicated data to the SQL Server 2012 database wants to use the (Server Authentication) mode. Is it possible to add a Server Authentication useID and Password?
Please let me know your thoughts.

Hi
You can change SQL Server Authentication by right clicking on the server instance and @Server Properties, Choose SQL Server and Windows Authentication Mode as shown in the image below
You have to restart the SQL Server for this to come into effect.
After this you are good to go for creating SQL Logins and using them.
Hope this helps.
Thanks,
BHanu

SQL Server 2012 Always ON routing to particular server based on User Name

I have configured SQL Server 2012 with AlwaysON availability groups. I could route my connections to Secondary node when I put the applicationintent = readonly on the connection string. However I would like to route all of my connections from particular
user name to my read only node. How can I accomplish this without changing connection string (Reason is I would like to be able to route connections for read only query to some older application client that doesn't support applicationintent parameter).

Hello,
There is nothing built in that will allow you to dynamically re-route connections based on usernames. This may be achieved outside of SQL Server through some sort of network appliance, but I can't say for sure.
Would it be possible to upgrade the SQL Client (to 2012+) for the old application and then change the connection string?
Sean Gallardy | Blog |
Twitter

Forms based authentication in sharepoint 2013 using custom membership provider

I am developing FBA for SP2013 using custom membership provider using the following link
http://benredl.wordpress.com/2012/10/03/creating-forms-based-authentication-and-user-profiles-in-sharepoint-2013-using-custom-membership-and-role-providers-and-a-custom-user-profile-synchronization-utility/
the feature i am trying to develop is that the user is created using a homegrown asp.net application which uses sql server
and then When that user goes to SP2013 he should be able to login with the username and password created using the homegrown asp.net application
my questions are following
If I follow the article in the link should i be taking the assembly(dll) and deploying it to GAC or will VS2013 automatically do it
Do I have to implement FindUserByEmail and FindUserByName methods ?
if the connectionstring for an asp.net application is in the web.config file where would the connection for the sqlserver go if this application is for SharePoint
TIA

Hi TIA,
try this it contains the code for you and it is ready
http://sharepoint2013fba.codeplex.com/
Kind Regards, John Naguib Technical Consultant/Architect MCITP, MCPD, MCTS, MCT, TOGAF 9 Foundation

Unable to install SQL Server 2012 Standard: Error code 0x851A0019

Hi All,
I am trying to install sql server 2012 standard edition on windows server 2008R2 but at the end of the installation it is giving me the following error message:
"The following error has occurred:
Wait on the Database Engine recovery handle failed. Check the SQL Server error log for potential causes."
And in the log file I got the following error message:
Feature: Database Engine Services
Status: Failed: see logs for details
Reason for failure: An error occurred during the setup process of the feature.
Next Step: Use the following information to resolve the error, uninstall this feature, and then run the setup process again.
Component name: SQL Server Database Engine Services Instance Features
Component error code: 0x851A0019
Error description: Wait on the Database Engine recovery handle failed. Check the SQL Server error log for potential causes.
Error help link: http://go.microsoft.com/fwlink?LinkId=20476&ProdName=Microsoft+SQL+Server&EvtSrc=setup.rll&EvtID=50000&ProdVer=11.0.2100.60&EvtType=0xD15B4EB2%400x4BDAF9BA%401306%4025&EvtType=0xD15B4EB2%400x4BDAF9BA%401306%4025
(I have posted part of the log file)
Need your help to resolve this issue.
Thanks,
MKNayeem

Hi,
Thanks for your reply.
I have already followed that article. I have changed the user to local account user, but it did not work.
Like you said the sql server is installed, but it is not starting the services. Following is the error log file message:
2015-03-16 10:12:15.27 Server Microsoft SQL Server 2012 - 11.0.2100.60 (X64)
Feb 10 2012 19:39:15
Copyright (c) Microsoft Corporation
Standard Edition (64-bit) on Windows NT 6.1 <X64> (Build 7601: Service Pack 1) (Hypervisor)
2015-03-16 10:12:15.27 Server (c) Microsoft Corporation.
2015-03-16 10:12:15.27 Server All rights reserved.
2015-03-16 10:12:15.29 Server Server process ID is 5724.
2015-03-16 10:12:15.29 Server System Manufacturer: 'VMware, Inc.', System Model: 'VMware Virtual Platform'.
2015-03-16 10:12:15.29 Server Authentication mode is MIXED.
2015-03-16 10:12:15.29 Server Logging SQL Server messages in file 'C:\Program Files\Microsoft SQL Server\MSSQL11.BNG1SECISO\MSSQL\Log\ERRORLOG'.
2015-03-16 10:12:15.29 Server The service account is 'NT Service\MSSQL$BNG1SECISO'. This is an informational message; no user action is required.
2015-03-16 10:12:15.29 Server Registry startup parameters:
-d C:\Program Files\Microsoft SQL Server\MSSQL11.BNG1SECISO\MSSQL\DATA\master.mdf
-e C:\Program Files\Microsoft SQL Server\MSSQL11.BNG1SECISO\MSSQL\Log\ERRORLOG
-l C:\Program Files\Microsoft SQL Server\MSSQL11.BNG1SECISO\MSSQL\DATA\mastlog.ldf
2015-03-16 10:12:15.29 Server Command Line Startup Parameters:
-s "BNG1SECISO"
2015-03-16 10:12:15.57 Server SQL Server detected 2 sockets with 1 cores per socket and 1 logical processors per socket, 2 total logical processors; using 2 logical processors based on SQL Server licensing. This is an informational message;
no user action is required.
2015-03-16 10:12:15.57 Server SQL Server is starting at normal priority base (=7). This is an informational message only. No user action is required.
2015-03-16 10:12:15.57 Server Detected 16383 MB of RAM. This is an informational message; no user action is required.
2015-03-16 10:12:15.57 Server Using conventional memory in the memory manager.
2015-03-16 10:12:15.67 Server This instance of SQL Server last reported using a process ID of 2452 at 16-03-2015 07:03:13 (local) 16-03-2015 01:33:13 (UTC). This is an informational message only; no user action is required.
2015-03-16 10:12:15.67 Server Node configuration: node 0: CPU mask: 0x0000000000000003:0 Active CPU mask: 0x0000000000000003:0. This message provides a description of the NUMA configuration for this computer. This is an informational
message only. No user action is required.
2015-03-16 10:12:15.69 Server Using dynamic lock allocation. Initial allocation of 2500 Lock blocks and 5000 Lock Owner blocks per node. This is an informational message only. No user action is required.
2015-03-16 10:12:15.69 Server Software Usage Metrics is disabled.
2015-03-16 10:12:15.70 spid6s Starting up database 'master'.
2015-03-16 10:12:15.78 Server CLR version v4.0.30319 loaded.
2015-03-16 10:12:15.82 Server Common language runtime (CLR) functionality initialized using CLR version v4.0.30319 from C:\Windows\Microsoft.NET\Framework64\v4.0.30319\.
2015-03-16 10:12:17.36 spid6s Error: 824, Severity: 24, State: 2.
2015-03-16 10:12:17.36 spid6s SQL Server detected a logical consistency-based I/O error: incorrect pageid (expected 1:377; actual 261:2228225). It occurred during a read of page (1:377) in database ID 1 at offset 0x000000002f2000 in
file 'C:\Program Files\Microsoft SQL Server\MSSQL11.BNG1SECISO\MSSQL\DATA\master.mdf'. Additional messages in the SQL Server error log or system event log may provide more detail. This is a severe error condition that threatens database integrity and
must be corrected immediately. Complete a full database consistency check (DBCC CHECKDB). This error can be caused by many factors; for more information, see SQL Server Books Online.
Thanks
MKNayeem

Forcing specific clients or groups to use forms based authentication (FBA) instead of windows based authentication (WIA) with ADFS

Hi,
We are have a quite specific issue. The problem is most likely by design in ADFS 3.0 (running on Windows Server 2012 R2) and we are trying to find a "work-around".
Most users in the organization is using their own personal computer and everything is fine and working as expected, single sign-on (WIA) internally to Office 365 and forms based (FBA) externally (using Citrix NetScaler as reverse proxy and load
balancing with the correct rewrites to add client-ip, proxy header and URL-transformation).
The problem occurs for a few (50-100) users where they are sharing the same computer, automatically logged on to the computer using a generic AD-user (same for all of them). This AD-user they are logged on with does not have any access to Office365
and if they try to access SharePoint Online they receive an error that they can't login (from SharePoint Online, not ADFS).
We can't change this, they need to have this generic account logged on to these computers. The issue occurs when a user that has access to SharePoint Online tries to access it when logged on with a generic account.
They are not able to "switch" from the generic account in ADFS / SharePoint Online to their personal account.
The only way I've found that may work is removing IE as a WIA-capable agent and deploy a User-Agent version string specific to most users but not the generic account.
My question to you: Is there another way? Maybe when ADFS sees the generic user, it forces forms based authentication or something like that?
Best regards,
Simon

I'd go with your original workaround using the user-agent and publishing a GPO for your normal users that elects to use a user-agent string associated with Integrated Windows Auth.. for the generic accounts, I'd look at using a loopback policy that overwrites
that user agent setting, so that forms logon is preferred for that subset of users. I don't think the Netscaler here is useful in this capacity as it's a front-end proxy and you need to evaluate the AuthZ rules on the AD FS server after the request has been
proxied. The error pages in Windows Server 2012 R2 are canned as the previous poster mentioned and difficult to customize (Javascript only)...
http://blog.auth360.net

SSMS.exe for SQL Server 2012 is getting Application Error: The exception unknown software exception (0xe0434352) occurred in the application at location 0x75c5c42d.

SQL Server 2012 Management Studio attempting to log into a SQL Server 2012 instance on a remote server using SQL Authenticated login.
What does this error mean and what can I do to fix it?
Thanks in advance!

Hi Nick,
Have you seen any additionally information from Windows Event Viewer?
Based on my research, exception code e0434352 is the exception code used internally by the CLR to represent most exceptions(*), it could mean anything. If you want to find out exactly what the real error is, please review this
blog.
In addition, in such case, Microsoft .Net Framework may need to be updated or repaired on your computer. For more details, you can refer to the following similar thread.
http://answers.microsoft.com/en-us/windows/forum/windows8_1-performance/the-exception-unknown-software-exception/f1404ce4-cdbe-4758-aa19-bad55fcc099c
Thanks,
Lydia Zhang

Microsoft SQL server 2012 express

i recently downloaded ENU\x86\SQLEXPR_x86_ENU.exe and ENU\x86\SQLManagementStudio_x86_ENU.exe from microsoft SQL server 2012 from official download centre page. First i installed SQLEXPR_x86 (database engine) with mixed mode authentication, then i installed
management studio with new installation option rather than selecting add new features.after both the successfull installation i learnt that in the object explorer, expanding database+system database+master i dont have a table option to create
new tables as earlier found in sql 2005 and 2008 versions. in simple words i dont have a table designer to create table, i have to type the statments using query editor to create and do manipulations in the table. for your further help i want to
tell you some related information:
1.i tried to get the table option with ENU\x86\SQLEXPRADV_x86_ENU.exe and ENU\x86\SQLEXPRWT_x86_ENU.exe without installing management studio as studio is already present in these packages. but still the problem persist.
2.i have windows 7 home basic installed on PC and windows 7 home premium on laptop both with service pack 1 with all the new updates.
3.after installation of sql server 2012 service pack, i thought problem might get solved but no.
i really need table designer feature.

Hello,
It is simple : in SSMS , after having connected to your SQL Server instance, you should see in the left panel a TreeView with the name of your instance. Right-click on the name of your instance .I n the context menu , click on Facets ( 12th item just above
Start PowerShell ).You will open a new form labeled "View Facets" followed by the "full" name of your SQL Server. In the bottom left part , you should see view the connection string .Click on it.
If the name of your database is master , it means that you are connected to the master database . The master database is a system database in which you are not allowed to create a new table ( it is an essential database containing information essential to
the survival of your SQL Server ).See this link ( even if it was for SQL Server 2012, it is always valuable )
http://www.mssqltips.com/sqlservertip/1420/sql-server-system-databases/
I would suggest to have a look at this link :
http://msdn.microsoft.com/en-us/library/ms187837.aspx ( special 2012 ) and especially the part recommendations.
As you have not yet created an user database , you connect automatically to the master database which is at least dangerous when you want to create a new table.
You have before to create a new database in which you will create your new table. It is what I have explained in my former post.
If you don't know how to create a new database, you have not posted in the good forum ( a curious habit from the original posters , maybe because they don't understand how to find the "good" forum but I recognize that I am often hesitating before finding
the most appropriate forum even if I am moderator since 6 years ). It is possible that I have not been clear enough but English is not my mother tongue ).
So don't hesitate to post again to obtain more help and explanations : this forum is full of highly-qualified persons always ready to help persons lost in SQL Server.
For me , you have 2 important steps :
- create a new database
http://msdn.microsoft.com/en-us/library/ms176061(v=sql.120).aspx
http://msdn.microsoft.com/en-us/library/ms186312(v=sql.120).aspx
- create a new table
http://msdn.microsoft.com/en-us/library/ms174979.aspx
According to me , it is simpler to create a new database or/and table without using TRANSACT-SQL through the visual interface of SSMS
for a database : right-click on the Databases node of your SQL Server instance and click on Create Database
for a table : as soon as you have created your database , its name should appear in the list under the Databases node.
Click on the little + on the left of this name to expand the node related to this new database.
Right-click on the Tables node and choose New Table. You should arrive to a new form making relatively easy the creation of the table , more exactly , the structure of the table with its columns ( names and data types ).
Don't hesitate to post again if you need more help( it is what I am doing when I am lost ) : you will find always someone available to help you at any time as moderators/answerers are nearly from every continent at any hour of the day ( when USA is sleeping
, Europe and Asia are awake ... )
Have a nice day
Mark Post as helpful if it provides any help.Otherwise,leave it as it is.

Why would you use a managed service account rather than a virtual account in SQL Server 2012?

In SQL Server 2012, service accounts are created as
virtual accounts (VAs), as described
here, as opposed to
managed service accounts (MSAs).
The important differences I can see for these, based on the descriptions:
MSAs are domain accounts, VAs are local accounts
MSAs use automagic password management handled by AD, VAs have no passwords
in a Kerberos context, MSAs register SPNs automatically, VAs do not
Are there any other differences? If Kerberos is not in use, why would a DBA ever prefer an MSA?
UPDATE:
Another user has noted a
possible contradiction in the MS docs concerning VAs:
The virtual account is auto-managed, and the virtual account can access the network
in a domain environment.
versus
Virtual accounts cannot be authenticated to a remote location. All virtual accounts
use the permission of machine account. Provision the machine account in the format
<domain_name>\<computer_name>$.
What is the "machine account"? How/when/why does it get "provisioned"? What is the difference between "accessing the network in a domain environment" and "authenticating to a remote location [in a domain environment]"?

Hi,
“Virtual accounts cannot be authenticated to a remote location. All virtual accounts use the permission of machine account. Provision the machine account in the format <domain_name>\<computer_name>$.”
“The virtual account is auto-managed, and the virtual account can access the network in a domain environment. If the default value is used for the service accounts during SQL Server setup on Windows Server 2008 R2 or Windows 7, a virtual account
using the instance name as the service name is used, in the format NT SERVICE\<SERVICENAME>”
Per the above description, they are two concepts and not conflict with each other.
As you understand, virtual account access network resources by using the credentials of the computer account. Generally, computer account will not be granted permission unless giving the computer account permission on the shared folder manually.
Thanks.
Tracy Cai
TechNet Community Support

Debug in sql server 2012

Hi,
I have 3 sql server (2005,2008,2012) In 2005 and 2008 remote debug (from sql management studio installed on the client) works without problems.
In sql 2012 debugging only works on sql management studio installed locally, why?
The server 2012 and the client are in the same domain, and both have the firewall disabled
to connect to all 3 I always use the same sql server management studio 2014
thanks!

Hi matti157,
As your description, you fail to use remote T-SQL Debugger in the instance of SQL Server 2012. Please help to post the error information here for analysis. Based on my research, the issue could be due to the RPC or authentication issue. You could pay attention
to the points below to troubleshoot your issue.
1.It is recommended to verify if the configuration of the T-SQL Debugging was done correctly. To verify that, you can follow the steps from the link:
http://msdn.microsoft.com/en-us/library/cc646024(v=sql.100).aspx
2.Verify if the SQL Server Management Studio was started with Administrator permissions (Run as Administrator);
3.Verify if the account used to connect remote to T-SQL Debugger has the right of ‘sysadmin’ on SQL Server Instance and if it is in the Local Administrators Windows Group
4.Verify if the following services are started:
a.TCP/IP NetBIOS Helper;
b.Remote Registry;
c.RPC Service;
5.Verify if DCOM is active on the server and client. To do that please follow the steps described in the link:
http://technet.microsoft.com/en-us/library/cc771387.aspx.
6.If you have intermediary devices between SQL Server and client, it is absolutely necessary to configure on this devices the necessary rules and ports , so the communication between the SQL Server and the client not to be blocked;
7.To verify if you have any issues with the permissions at DCOM level, you can activate the DCOM logging using the following link:
http://support.microsoft.com/kb/892500. To verify if the DCOM works fine you can do the test from the following article
http://support.microsoft.com/kb/259011/en-us.
For more information about the process, please refer to the article:
http://blogs.technet.com/b/beatrice_popa/archive/2012/11/28/quot-unable-to-start-t-sql-debugging-could-not-attach-to-sql-server-process-on-databasename-the-rpc-server-is-unavailable-quot.aspx
Regards,
Michelle Li

Access 2007 ADP to SQL Server 2012 with extended protection

Hello,
I have a Access 2007 ADP client connecting to an sql server 2012. This works fine with standard security configuration, but when I activate extended protection on the SQL server, the Access client cannot connect to the server. I am using integrated security
with a domain user and get the error message
"Login failed. The login is from an untrusted domain and cannot be used with Windows authentication."
In sql server logfile I find:
"SSPI handshake failed with error code 0x80090346, state 46 while establishing a connection with integrated security; the connection has been closed. Reason: The Channel Bindings from this client are missing or do not match the established Transport
Layer Security (TLS) Channel".
Is there any "easy" solution other than developing a new client based on an up to date Office version or Dot.Net?
Regards,
charles-f

Well, I have no problem connecting to the sql server from my pc using ssms with my domain account. I have also sucessfully create a odbc connection using the "SQL Server Native Client 11.0" driver and my domain account. My account is in a trusted
domain, so this seems not to be the problem.
To me it rather looks like if Access is using an old driver which does not support the tls encryption required by the extended protection settings.
regards, charles-f

Form Based Authentication in SQL Server 2012

Similar Messages

Maybe you are looking for