Extranet Deployment with Remote SQL

Sorry, I have done this before but I got a braincramp and forgot the
procedure: Im setting up an External Site for a company inside there DMZ (NO
COnnection to Internal Users). AD and WSS will be in the "Blue Zone" and
there is a seperate SQL Server in the DMZ that is part of a workgroup. How
can i set up the authentication to allow WSS and the workgroup SQL box to
communicate with each other for the WSS databases.
Currently I have set this up in a test VM setting using the "Network
Service" as the communication link. Thoughts..??

No im not a moron... i just play one on occasion :)

Alex
Fri Nov 11 09:20:38 CST 2005

Hi Bob,

All you have to do is to configure the app pool for your SharePoint virtual
server to use a domain account which is granted Security Admins and Database
Creators roles on the SQL box. This account also needs local admin or power
user rights on the SharePoint box.

HTH,
Alex

"Bob" <Bob@discussions.microsoft.com> wrote in message
news:34BE6AC5-58EE-4082-90CE-A4AF604889EA@microsoft.com...
> Sorry, I have done this before but I got a braincramp and forgot the
> procedure: Im setting up an External Site for a company inside there DMZ
> (NO
> COnnection to Internal Users). AD and WSS will be in the "Blue Zone" and
> there is a seperate SQL Server in the DMZ that is part of a workgroup.
> How
> can i set up the authentication to allow WSS and the workgroup SQL box to
> communicate with each other for the WSS databases.
> Currently I have set this up in a test VM setting using the "Network
> Service" as the communication link. Thoughts..??
>
> No im not a moron... i just play one on occasion :)

Bob
Fri Nov 11 09:30:09 CST 2005

Thats the part im having a braincramp with...... the SQL box is not on the
domain. It is part of a workgroup.

"Alex Kirillov" wrote:

> Hi Bob,
>
> All you have to do is to configure the app pool for your SharePoint virtual
> server to use a domain account which is granted Security Admins and Database
> Creators roles on the SQL box. This account also needs local admin or power
> user rights on the SharePoint box.
>
> HTH,
> Alex
>
> "Bob" <Bob@discussions.microsoft.com> wrote in message
> news:34BE6AC5-58EE-4082-90CE-A4AF604889EA@microsoft.com...
> > Sorry, I have done this before but I got a braincramp and forgot the
> > procedure: Im setting up an External Site for a company inside there DMZ
> > (NO
> > COnnection to Internal Users). AD and WSS will be in the "Blue Zone" and
> > there is a seperate SQL Server in the DMZ that is part of a workgroup.
> > How
> > can i set up the authentication to allow WSS and the workgroup SQL box to
> > communicate with each other for the WSS databases.
> > Currently I have set this up in a test VM setting using the "Network
> > Service" as the communication link. Thoughts..??
> >
> > No im not a moron... i just play one on occasion :)
>
>
>

Alex
Fri Nov 11 10:38:43 CST 2005

What about SQL authentication then? It will work regardless of your domain
setup.

"Bob" <Bob@discussions.microsoft.com> wrote in message
news:97163632-7C3A-4F5C-9EC2-D684B98A8C3D@microsoft.com...
> Thats the part im having a braincramp with...... the SQL box is not on the
> domain. It is part of a workgroup.
>
> "Alex Kirillov" wrote:
>
>> Hi Bob,
>>
>> All you have to do is to configure the app pool for your SharePoint
>> virtual
>> server to use a domain account which is granted Security Admins and
>> Database
>> Creators roles on the SQL box. This account also needs local admin or
>> power
>> user rights on the SharePoint box.
>>
>> HTH,
>> Alex
>>
>> "Bob" <Bob@discussions.microsoft.com> wrote in message
>> news:34BE6AC5-58EE-4082-90CE-A4AF604889EA@microsoft.com...
>> > Sorry, I have done this before but I got a braincramp and forgot the
>> > procedure: Im setting up an External Site for a company inside there
>> > DMZ
>> > (NO
>> > COnnection to Internal Users). AD and WSS will be in the "Blue Zone"
>> > and
>> > there is a seperate SQL Server in the DMZ that is part of a workgroup.
>> > How
>> > can i set up the authentication to allow WSS and the workgroup SQL box
>> > to
>> > communicate with each other for the WSS databases.
>> > Currently I have set this up in a test VM setting using the "Network
>> > Service" as the communication link. Thoughts..??
>> >
>> > No im not a moron... i just play one on occasion :)
>>
>>
>>

Bob
Fri Nov 11 10:47:06 CST 2005

Exactly and it does.... however i am currently running everything on the
Network Service.... I was hoping to set up another account to have this run
under for both WSS and SQL....

"Alex Kirillov" wrote:

> What about SQL authentication then? It will work regardless of your domain
> setup.
>
> "Bob" <Bob@discussions.microsoft.com> wrote in message
> news:97163632-7C3A-4F5C-9EC2-D684B98A8C3D@microsoft.com...
> > Thats the part im having a braincramp with...... the SQL box is not on the
> > domain. It is part of a workgroup.
> >
> > "Alex Kirillov" wrote:
> >
> >> Hi Bob,
> >>
> >> All you have to do is to configure the app pool for your SharePoint
> >> virtual
> >> server to use a domain account which is granted Security Admins and
> >> Database
> >> Creators roles on the SQL box. This account also needs local admin or
> >> power
> >> user rights on the SharePoint box.
> >>
> >> HTH,
> >> Alex
> >>
> >> "Bob" <Bob@discussions.microsoft.com> wrote in message
> >> news:34BE6AC5-58EE-4082-90CE-A4AF604889EA@microsoft.com...
> >> > Sorry, I have done this before but I got a braincramp and forgot the
> >> > procedure: Im setting up an External Site for a company inside there
> >> > DMZ
> >> > (NO
> >> > COnnection to Internal Users). AD and WSS will be in the "Blue Zone"
> >> > and
> >> > there is a seperate SQL Server in the DMZ that is part of a workgroup.
> >> > How
> >> > can i set up the authentication to allow WSS and the workgroup SQL box
> >> > to
> >> > communicate with each other for the WSS databases.
> >> > Currently I have set this up in a test VM setting using the "Network
> >> > Service" as the communication link. Thoughts..??
> >> >
> >> > No im not a moron... i just play one on occasion :)
> >>
> >>
> >>
>
>
>

Alex
Fri Nov 11 10:57:09 CST 2005

That's irrelevant that you run your VS under Network Service identity. When
you extend it you can specify to use SQL authentication for the SQL server.
I'm not sure if you can do it in the web UI, but stsadm.exe allows to do it.

"Bob" <Bob@discussions.microsoft.com> wrote in message
news:3B639C48-35B1-4386-90F5-84AB7FB6256C@microsoft.com...
> Exactly and it does.... however i am currently running everything on the
> Network Service.... I was hoping to set up another account to have this
> run
> under for both WSS and SQL....
>
> "Alex Kirillov" wrote:
>
>> What about SQL authentication then? It will work regardless of your
>> domain
>> setup.
>>
>> "Bob" <Bob@discussions.microsoft.com> wrote in message
>> news:97163632-7C3A-4F5C-9EC2-D684B98A8C3D@microsoft.com...
>> > Thats the part im having a braincramp with...... the SQL box is not on
>> > the
>> > domain. It is part of a workgroup.
>> >
>> > "Alex Kirillov" wrote:
>> >
>> >> Hi Bob,
>> >>
>> >> All you have to do is to configure the app pool for your SharePoint
>> >> virtual
>> >> server to use a domain account which is granted Security Admins and
>> >> Database
>> >> Creators roles on the SQL box. This account also needs local admin or
>> >> power
>> >> user rights on the SharePoint box.
>> >>
>> >> HTH,
>> >> Alex
>> >>
>> >> "Bob" <Bob@discussions.microsoft.com> wrote in message
>> >> news:34BE6AC5-58EE-4082-90CE-A4AF604889EA@microsoft.com...
>> >> > Sorry, I have done this before but I got a braincramp and forgot
>> >> > the
>> >> > procedure: Im setting up an External Site for a company inside
>> >> > there
>> >> > DMZ
>> >> > (NO
>> >> > COnnection to Internal Users). AD and WSS will be in the "Blue
>> >> > Zone"
>> >> > and
>> >> > there is a seperate SQL Server in the DMZ that is part of a
>> >> > workgroup.
>> >> > How
>> >> > can i set up the authentication to allow WSS and the workgroup SQL
>> >> > box
>> >> > to
>> >> > communicate with each other for the WSS databases.
>> >> > Currently I have set this up in a test VM setting using the "Network
>> >> > Service" as the communication link. Thoughts..??
>> >> >
>> >> > No im not a moron... i just play one on occasion :)
>> >>
>> >>
>> >>
>>
>>
>>

Bob
Fri Nov 11 11:19:06 CST 2005

Thanks Alex.... your correct.... that was my issue.. I was using the Web GUI.
There are certain parameters that obviously cant be passed and this is one
of them.... THanks again.

"Alex Kirillov" wrote:

> That's irrelevant that you run your VS under Network Service identity. When
> you extend it you can specify to use SQL authentication for the SQL server.
> I'm not sure if you can do it in the web UI, but stsadm.exe allows to do it.
>
> "Bob" <Bob@discussions.microsoft.com> wrote in message
> news:3B639C48-35B1-4386-90F5-84AB7FB6256C@microsoft.com...
> > Exactly and it does.... however i am currently running everything on the
> > Network Service.... I was hoping to set up another account to have this
> > run
> > under for both WSS and SQL....
> >
> > "Alex Kirillov" wrote:
> >
> >> What about SQL authentication then? It will work regardless of your
> >> domain
> >> setup.
> >>
> >> "Bob" <Bob@discussions.microsoft.com> wrote in message
> >> news:97163632-7C3A-4F5C-9EC2-D684B98A8C3D@microsoft.com...
> >> > Thats the part im having a braincramp with...... the SQL box is not on
> >> > the
> >> > domain. It is part of a workgroup.
> >> >
> >> > "Alex Kirillov" wrote:
> >> >
> >> >> Hi Bob,
> >> >>
> >> >> All you have to do is to configure the app pool for your SharePoint
> >> >> virtual
> >> >> server to use a domain account which is granted Security Admins and
> >> >> Database
> >> >> Creators roles on the SQL box. This account also needs local admin or
> >> >> power
> >> >> user rights on the SharePoint box.
> >> >>
> >> >> HTH,
> >> >> Alex
> >> >>
> >> >> "Bob" <Bob@discussions.microsoft.com> wrote in message
> >> >> news:34BE6AC5-58EE-4082-90CE-A4AF604889EA@microsoft.com...
> >> >> > Sorry, I have done this before but I got a braincramp and forgot
> >> >> > the
> >> >> > procedure: Im setting up an External Site for a company inside
> >> >> > there
> >> >> > DMZ
> >> >> > (NO
> >> >> > COnnection to Internal Users). AD and WSS will be in the "Blue
> >> >> > Zone"
> >> >> > and
> >> >> > there is a seperate SQL Server in the DMZ that is part of a
> >> >> > workgroup.
> >> >> > How
> >> >> > can i set up the authentication to allow WSS and the workgroup SQL
> >> >> > box
> >> >> > to
> >> >> > communicate with each other for the WSS databases.
> >> >> > Currently I have set this up in a test VM setting using the "Network
> >> >> > Service" as the communication link. Thoughts..??
> >> >> >
> >> >> > No im not a moron... i just play one on occasion :)
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

Alex
Fri Nov 11 11:41:20 CST 2005

You're welcome!

"Bob" <Bob@discussions.microsoft.com> wrote in message
news:6F6D473E-625D-48D5-A707-B25F7CD6B190@microsoft.com...
> Thanks Alex.... your correct.... that was my issue.. I was using the Web
> GUI.
> There are certain parameters that obviously cant be passed and this is one
> of them.... THanks again.
>
> "Alex Kirillov" wrote:
>
>> That's irrelevant that you run your VS under Network Service identity.
>> When
>> you extend it you can specify to use SQL authentication for the SQL
>> server.
>> I'm not sure if you can do it in the web UI, but stsadm.exe allows to do
>> it.
>>
>> "Bob" <Bob@discussions.microsoft.com> wrote in message
>> news:3B639C48-35B1-4386-90F5-84AB7FB6256C@microsoft.com...
>> > Exactly and it does.... however i am currently running everything on
>> > the
>> > Network Service.... I was hoping to set up another account to have this
>> > run
>> > under for both WSS and SQL....
>> >
>> > "Alex Kirillov" wrote:
>> >
>> >> What about SQL authentication then? It will work regardless of your
>> >> domain
>> >> setup.
>> >>
>> >> "Bob" <Bob@discussions.microsoft.com> wrote in message
>> >> news:97163632-7C3A-4F5C-9EC2-D684B98A8C3D@microsoft.com...
>> >> > Thats the part im having a braincramp with...... the SQL box is not
>> >> > on
>> >> > the
>> >> > domain. It is part of a workgroup.
>> >> >
>> >> > "Alex Kirillov" wrote:
>> >> >
>> >> >> Hi Bob,
>> >> >>
>> >> >> All you have to do is to configure the app pool for your SharePoint
>> >> >> virtual
>> >> >> server to use a domain account which is granted Security Admins and
>> >> >> Database
>> >> >> Creators roles on the SQL box. This account also needs local admin
>> >> >> or
>> >> >> power
>> >> >> user rights on the SharePoint box.
>> >> >>
>> >> >> HTH,
>> >> >> Alex
>> >> >>
>> >> >> "Bob" <Bob@discussions.microsoft.com> wrote in message
>> >> >> news:34BE6AC5-58EE-4082-90CE-A4AF604889EA@microsoft.com...
>> >> >> > Sorry, I have done this before but I got a braincramp and forgot
>> >> >> > the
>> >> >> > procedure: Im setting up an External Site for a company inside
>> >> >> > there
>> >> >> > DMZ
>> >> >> > (NO
>> >> >> > COnnection to Internal Users). AD and WSS will be in the "Blue
>> >> >> > Zone"
>> >> >> > and
>> >> >> > there is a seperate SQL Server in the DMZ that is part of a
>> >> >> > workgroup.
>> >> >> > How
>> >> >> > can i set up the authentication to allow WSS and the workgroup
>> >> >> > SQL
>> >> >> > box
>> >> >> > to
>> >> >> > communicate with each other for the WSS databases.
>> >> >> > Currently I have set this up in a test VM setting using the
>> >> >> > "Network
>> >> >> > Service" as the communication link. Thoughts..??
>> >> >> >
>> >> >> > No im not a moron... i just play one on occasion :)
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>