dbTalk Databases Forums  

DTS Security in SQL 2005

microsoft.public.sqlserver.dts microsoft.public.sqlserver.dts


Discuss DTS Security in SQL 2005 in the microsoft.public.sqlserver.dts forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Todd C
 
Posts: n/a

Default DTS Security in SQL 2005 - 06-28-2006 , 02:40 PM






I have a job that kicks off a stored procedure. The proc in turn kicks off 25
DTS packages with scripts like

execute master.dbo.xp_cmdshell 'dtsrun /Smtcntsql02 /NNavision_TT_Vendor /E'

for a while, we were using the /U and /P switches with the sa account and
password. The packages still run OK with the /E switch for integrated
security, but a trace on the server shows that the connection is being made
with in the context of the sa account. We are trying to eliminate all
references to sa in DTS. Why would it still use sa even though the /E is
specified?

I suspect that the job still runs BECAUSE it runs under sa. I bet once I get
it to run under integrated security, it will fail. but that's OK. I can fix
that.

Any suggestions would help.

Thanks

Todd C

Reply With Quote
  #2  
Old   
Matt
 
Posts: n/a

Default RE: DTS Security in SQL 2005 - 06-28-2006 , 08:54 PM






How are the connections in the dts packages configured? If the connection is
set up to authenticate with the sa user, then executing the package with /u +
/p, or /e will not override the connection settings.

"Todd C" wrote:

Quote:
I have a job that kicks off a stored procedure. The proc in turn kicks off 25
DTS packages with scripts like

execute master.dbo.xp_cmdshell 'dtsrun /Smtcntsql02 /NNavision_TT_Vendor /E'

for a while, we were using the /U and /P switches with the sa account and
password. The packages still run OK with the /E switch for integrated
security, but a trace on the server shows that the connection is being made
with in the context of the sa account. We are trying to eliminate all
references to sa in DTS. Why would it still use sa even though the /E is
specified?

I suspect that the job still runs BECAUSE it runs under sa. I bet once I get
it to run under integrated security, it will fail. but that's OK. I can fix
that.

Any suggestions would help.

Thanks

Todd C

Reply With Quote
  #3  
Old   
Todd C
 
Posts: n/a

Default RE: DTS Security in SQL 2005 - 06-29-2006 , 07:23 AM



Ah, missed that one. Thanks.
Yes, all the connections in the DTS packages themselves are using database
level security.

"Matt" wrote:

Quote:
How are the connections in the dts packages configured? If the connection is
set up to authenticate with the sa user, then executing the package with /u +
/p, or /e will not override the connection settings.

"Todd C" wrote:

I have a job that kicks off a stored procedure. The proc in turn kicks off 25
DTS packages with scripts like

execute master.dbo.xp_cmdshell 'dtsrun /Smtcntsql02 /NNavision_TT_Vendor /E'

for a while, we were using the /U and /P switches with the sa account and
password. The packages still run OK with the /E switch for integrated
security, but a trace on the server shows that the connection is being made
with in the context of the sa account. We are trying to eliminate all
references to sa in DTS. Why would it still use sa even though the /E is
specified?

I suspect that the job still runs BECAUSE it runs under sa. I bet once I get
it to run under integrated security, it will fail. but that's OK. I can fix
that.

Any suggestions would help.

Thanks

Todd C

Reply With Quote
  #4  
Old   
Allan Mitchell
 
Posts: n/a

Default Re: DTS Security in SQL 2005 - 07-01-2006 , 05:39 AM



Hello Todd,

The /E switch to the DTSRun command is simply saying that to retrieve the
package from the server you want to use Windows Authentication. It has nothing
to do with what the connections inside the retrieved package use.

Allan

Quote:
I have a job that kicks off a stored procedure. The proc in turn kicks
off 25 DTS packages with scripts like

execute master.dbo.xp_cmdshell 'dtsrun /Smtcntsql02
/NNavision_TT_Vendor /E'

for a while, we were using the /U and /P switches with the sa account
and password. The packages still run OK with the /E switch for
integrated security, but a trace on the server shows that the
connection is being made with in the context of the sa account. We are
trying to eliminate all references to sa in DTS. Why would it still
use sa even though the /E is specified?

I suspect that the job still runs BECAUSE it runs under sa. I bet once
I get it to run under integrated security, it will fail. but that's
OK. I can fix that.

Any suggestions would help.

Thanks

Todd C




Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.