SMTPAuth (Settings panel does not appear)

Tomorrow (July 12th) I’ll be presenting my monthly webinar. It’s been updated to include more information about SQL Server Reporting Services (R2) and Visual Studio 2010. This high-impact series of six 90-minute webinars held over three mornings (Pacific time from 09:00-12:30) is for anyone who wants to leverage Business Intelligence Development Studio (BIDS), SQL Server and Reporting Services best practices—learning what works, what doesn't and why. These sessions are for developers, architects and managers who want to know how and (more importantly) when to leverage the power and benefits of SQL Server and Reporting Services. The fee also includes both of my Reporting Services and Visual Studio books.

Incidentally, Progressive does not care how many people sit in on the sessions so you can fill a meeting room or the local theater if you want to. These are also designed to be interactive—that is, I encourage the attendees to chat in questions anytime or ask over the phone at the end.

Want a front-row seat in my next Webinar? If so, I’m accepting applications for the live studio audience. All you need to do is send me an note saying why you would like to attend. I can comfortably sit about four people so get your application in early. Let me worry about the conference $999 fee, but if you bring doughnuts for everyone... I’ll pick the audience the Friday before the next talk.

What issues are exposed when using SSPI authentication? How does one avoid these issues?

There were lots of answers that almost universally said that using SSPI authentication was the way to go. A number of folks cataloged many of the problems associated with SSPI including having to implement Kerberos when using multiple hops. I’m no fan of Kerberos as it can make a fairly simple client/server or Reporting Services site unmanageable. But everyone missed the point. Consider this scenario:

The question for the month of June seems deceptively easy:

What issues are exposed when using SSPI authentication? How does one avoid these issues?

When I initially wrote this question, I was thinking about SQL Server Reporting Services reports and the data source connections they establish, but the question also applies to applications of all kinds that connect to data sources. As you (should) know, SSPI (or “trusted”) connections use the currently logged in Windows system credentials to pass along to the data source. The trusted approach precludes the need to use hard-coded (or generated) data source-dependent login names and passwords. With SSPI/trusted authentication, if the Windows user has a login account on the target SQL Server (or other data source), the connection is permitted to be (further) authenticated. No, the data source might not authenticate the connection if the user does not have rights on the initial catalog (default database), or if the server is too busy to take on additional connections, but that’s another issue.

• The question is, do you know what issues are exposed when you use this trusted connection approach?
• What are the alternatives and why should they be considered?
• What are the downsides to these alternatives?

Want a hint? Check out Chapter 9 of my 7th Edition.

Note that you are not permitted to post answers to this question until June 1st. 2011.

Bill Vaughn

Postscript:

So, it seems that most responders to this question think that SSPI is the way to go. Here is another hint: Consider that SQL Server permits an application to submit any number of TSQL operations in a single query.

http://social.microsoft.com/Forums/en-US/sharedviewbetahelp/threads

This is pretty sad. I leaves me and many other trainers and support professionals in the lurch. Now I have to find a suitable (non-Microsoft) replacement, test it and learn how to use it as well as update my course materials. I expect this is not nearly as expensive as the costs incurred by others that depend on SharedView on a daily basis.

Why is SharedView important? Yes there are other programs that purport to do the same. The SharedView advantage is that it's a MICROSOFT desktop sharing solution. You don't have to convince a customer that this free program is going to do anything but do what it's supposed to do. It's very lightweight, installs in seconds, is virtually pain-free and is brutally simple for each end to use. We have lots of sites where remote desktop is not an option--especially in my webinar classes. Consider that SV lets me view the system while the customer demonstrates a problem. I can take over his mouse and keyboard but only if he lets me and all he needs to do to take control back is move the mouse or press a key. It gave the customers a lot more confidence in their own system's security.

Wonder why the Microsoft stock is flat or falling while other companies continue to grow even in this economy? Now you know.

My wife and I just (barely) endured a long trip to London from Seattle and back via American Airlines. They (and the airports) could have done quite a bit more to make the trip more comfortable (or at least more tolerable) but mostly, they could have done so more quietly. 

My new webinar/lab class launches next week on February 8-10. It’s the premier edition of a series of lectures and lab exercises that walk report developers through the process of learning enough Visual Basic to create serious report expressions for use with Reporting Services reports.

We follow the introduction to Visual Basic with an in-depth discussion of how to add code-based expressions to your reports, but more importantly, how to share the code between reports. The final session shows how to create managed-code DLLs that can be developed in C#, VB.NET or any .NET CLR language and leveraged by the report processor when rendering your report.

The mentored lab exercises walk you through the process of creating a Visual Basic test-harness, coding and debugging complex code expressions and finally, you’ll create your own sharable managed-code DLL that can be used in all kinds of deployed reports.

Here’s the link to the Progressive site.

____________

You're a 19 year old kid. You're critically wounded and dying in the jungle somewhere in the Central Highlands of Vietnam. It's  November 11, 1967.   LZ (landing zone) X-ray. Your unit is outnumbered 8-1 and the enemy fire is so intense, from 100 yards away, that  your CO (commanding officer) has ordered the Medevac helicopters to stop coming in. You're lying there, listening to the enemy machine guns and you know you're not getting out. Your family is half way around the world, 12,000 miles away, and you'll never see them again. As the world starts to fade in and out, you know this is the day.

Then - over the machine gun noise - you faintly hear that sound of a helicopter. You look  up to see a Huey coming in. But ... It doesn't  seem real because no Medevac markings are on it. Captain Ed Freeman is coming in for you. He's not Medevac so it's not his job, but he heard the radio call and decided he's flying his Huey down into the machine gun fire anyway. Even after the Medevacs were ordered not to come. He's coming anyway. And he drops it in and sits there in the machine gun fire, as they load 3 of you at a time on board. Then he flies you up and out through the gunfire to the doctors and nurses and safety. And, he kept coming back!! 13 more  times!! Until all the wounded were out. No one knew until the mission was over that the Captain had been hit 4 times in the legs and left arm. He took 29 of you and your buddies out that day. Some would not have made it without the Captain and his Huey.

Medal  of Honor Recipient, Captain  Ed Freeman, United States Air Force, 
died on August 20, 2008  at the age of 70 due to complications from Parkinson's disease.   He was buried with full military honors at the Idaho State Veterans Cemetery in Boise.
 
May God Bless and Rest His Soul.

I bet you didn't hear about this real hero's passing,  but we've sure seen a whole bunch about Michael Jackson, Tiger Woods and the bickering of congress over Health Reform.

______________

I’m also a Vietnam Vet. I flew for the 7/17 Air Cavalry for 9 months in II Corps (the Central Highlands) in 1969. I'm no Ed Freeman--not anywhere near it. But Ed was a member of our Vietnam Helicopter Pilots Association here in Washington State and I was proud to have known him.

By far, most of my missions in Vietnam were a walk in the park compared to so many others that flew back into danger to help others left behind. Those that came back returned as different people. Some still suffer today. And America didn’t learn the lessons of Vietnam. Our military is still fighting the longest war in its history, for reasons that we now find to be clouded, in a country with corrupt leaders, where our technology cannot win the hearts and support of the families that struggle for existence. Like Vietnam, the Afghan war cannot be won with bombs and bullets (according to our own generals). Like the Vietnamese, the men, women and children in the middle-east just want peace. So do nearly all Veterans. It’s why we fight and die and come back wounded only to find our jobs are gone and our families and marriages forever scarred. And we commit suicide at an alarming rate. So yes, tell a Veteran “Thanks” but remember him when you go to to polls to vote. Too many of the candidates wanted to cut funding for Veteran hospitals, clinics and counseling. There are lots of ways to support the troops—even if you don’t believe in the current war.