What I want to do is, if userA access the website, then the website will use userA's token to access the SQL server. Site is an intranet site.
In web.config,I have
<authentication mode="Windows"/>
<identity impersonate="true"/>
Connection string:
Data Source=sql;Initial Catalog=xxxxxx;Integrated Security=SSPI;persist security info=False;
IIS:
Annoymous login is disabled, Windows authenication is enabled.
SQL server:
userA is added as a user to the database.
IIS and SQL server are on different server. Running as userA on another computer, I try to access the website. The website log told me the website was trying to login to the SQL server with NT Authority\Annoymous despite I specified to use integrated security and Annoymous login is disabled in IIS. Why??
...
Go to the complete details ...