dbTalk Databases Forums  

multi-domains without trust

microsoft.public.sqlserver.olap microsoft.public.sqlserver.olap


Discuss multi-domains without trust in the microsoft.public.sqlserver.olap forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
 
Posts: n/a

Default multi-domains without trust - 08-20-2004 , 08:21 PM






i have to implement an olap server inside of different domain.

these domains dont have trusts, and they can't--

i can't figure out the best architecutre here.

Just pretend for a second, that this is my arch.

1) i work in a domain called happy
2) the datamart is in a domain called sad
3) to get to sad, i have to TS using my sad account and from there, I only
have access to machines on the sd domain.
4) i plan on putting the OLAP inside the sad domain.

i just need to be able to:

a) get to the OLAP data from either happy or sad domain.
b) not use SQL permissions
c) not change AD

should i just focus on getting the DM out of the sad domain and into the
happy domain?

might SQL 2005 have an improvement in this aspect?

aaron



Reply With Quote
  #2  
Old   
Dave Wickert [MSFT]
 
Posts: n/a

Default Re: multi-domains without trust - 08-22-2004 , 04:53 PM






This is discussed extensively in these two white papers:
http://www.microsoft.com/technet/pro.../anservog.mspx
(in the Security Administration section)
http://msdn.microsoft.com/library/de...l_datapump.asp

--
Dave Wickert [MSFT]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI SystemsTeam
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no rights.

<aaron_kempf (AT) hotmail (DOT) com> wrote

Quote:
i have to implement an olap server inside of different domain.

these domains dont have trusts, and they can't--

i can't figure out the best architecutre here.

Just pretend for a second, that this is my arch.

1) i work in a domain called happy
2) the datamart is in a domain called sad
3) to get to sad, i have to TS using my sad account and from there, I only
have access to machines on the sd domain.
4) i plan on putting the OLAP inside the sad domain.

i just need to be able to:

a) get to the OLAP data from either happy or sad domain.
b) not use SQL permissions
c) not change AD

should i just focus on getting the DM out of the sad domain and into the
happy domain?

might SQL 2005 have an improvement in this aspect?

aaron





Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.