Showing posts with label network. Show all posts
Showing posts with label network. Show all posts

Tuesday, March 27, 2012

Encryption of SQL Queries

Hi.

I am running SQL select queries over a network from a SQL Server to a mySQL server by creating a linked server.

I need data to be encrypted (nothing heavy), but some form of encryption over the network as it exits the firewall.

Any help appreciated.

Karloi'm no expert with sql server. but i am pritty good with using Windows networking. i think in this case you might wanna check out IPSec deployment. it would be the most secure option. the Windows 2003 site has alot of docs on ipsec. also to some extent i think ssl might work too but i'm not sure|||

Karlo S wrote:

Hi.

I am running SQL select queries over a network from a SQL Server to a mySQL server by creating a linked server.

I need data to be encrypted (nothing heavy), but some form of encryption over the network as it exits the firewall.

Any help appreciated.

Karlo


Natively with SQL you can utilise certificates to achieve this, or indeed IPSec if your mySQL server supports it, and if both servers were SQL 2005 MS might suggest using HTTP endpoints.
However you mentioned firewalls, and I would recommend that you implement a firewall to firewall VPN between your network and the destination network containing the mySQL. This simpifies things greatly, and requires no config on either database server.

Encryption of SQL Queries

Hi.

I am running SQL select queries over a network from a SQL Server to a mySQL server by creating a linked server.

I need data to be encrypted (nothing heavy), but some form of encryption over the network as it exits the firewall.

Any help appreciated.

Karloi'm no expert with sql server. but i am pritty good with using Windows networking. i think in this case you might wanna check out IPSec deployment. it would be the most secure option. the Windows 2003 site has alot of docs on ipsec. also to some extent i think ssl might work too but i'm not sure|||

Karlo S wrote:

Hi.

I am running SQL select queries over a network from a SQL Server to a mySQL server by creating a linked server.

I need data to be encrypted (nothing heavy), but some form of encryption over the network as it exits the firewall.

Any help appreciated.

Karlo


Natively with SQL you can utilise certificates to achieve this, or indeed IPSec if your mySQL server supports it, and if both servers were SQL 2005 MS might suggest using HTTP endpoints.
However you mentioned firewalls, and I would recommend that you implement a firewall to firewall VPN between your network and the destination network containing the mySQL. This simpifies things greatly, and requires no config on either database server.sql

Thursday, March 22, 2012

Encryption

Hello. Does anyone know of a way or tool that can tell you if the data/info
being sent over the network is being encrypted to a SQL Server 2000 on a
Win2K? My certificate expired and just wanted to know if I need to install
a new certificate or not.
Thanks in advance.
JJ,
Try http://www.ethereal.com/ it is free.
What type of cert is this? Is it a web cert on port 443? If so then your
connection is still secure. However, your browswer will display a 'pop up'
that says the cert is expired.
Hope that helps!
-Carlos
"J" wrote:

> Hello. Does anyone know of a way or tool that can tell you if the data/in
fo
> being sent over the network is being encrypted to a SQL Server 2000 on a
> Win2K? My certificate expired and just wanted to know if I need to instal
l
> a new certificate or not.
> Thanks in advance.
> J
>
>|||Thanks Carlos for your reply and speediness. I appreciate it.
Well, I have some Access databases on our network that have linked tables to
our SQL2K machine and also have a web server running some .asp pages that
sends data to the same SQL2K machine and was wondering if the data traveling
across the network was encrypted since I have the 'Force protocol
encryption' turned on through the Server Network Utility the certificate
that I had installed onto our SQL machine but the certificate has expired
and haven't gotten any error messages or any users complaining about their
data entry.
J
"Carlos Caneja" <Carlos Caneja@.discussions.microsoft.com> wrote in message
news:C8A01996-E20A-4BD5-8C1A-FF3DBBFE798B@.microsoft.com...[vbcol=seagreen]
> J,
> Try http://www.ethereal.com/ it is free.
> What type of cert is this? Is it a web cert on port 443? If so then your
> connection is still secure. However, your browswer will display a 'pop
> up'
> that says the cert is expired.
> Hope that helps!
> -Carlos
> "J" wrote:
>

Sunday, March 11, 2012

Encrypt/ decrypt network traffic.

I can sucessfully encrypt/ decrypt 1 column, but Im under the impression there is also a way to encrypt the data being sent over the network by using a certificate? I can find lots of info, but no starting point or clear cut instructions. Could someone please assist?
TIA, cfrgo to books online. hit the search tab and type in ssl.|||Perfect, thanks!

ms-help://MS.SQLCC.v9/MS.SQLSVR.v9.en/udb9/html/e1e55519-97ec-4404-81ef-881da3b42006.htm

Encrypt Passwords

I would like to put all my sa and other passwords into a
text-like file and save it out on the network w/o fear
that it can be cracked. Can someone suggest some (and
reasonable) third party tools for something basic like
this?
You may want to look at using something like Whisper 32.
It's free and available at:
http://www.ivory.org/index.html
-Sue
On Tue, 20 Jul 2004 13:32:07 -0700, "Blnt"
<anonymous@.discussions.microsoft.com> wrote:

>I would like to put all my sa and other passwords into a
>text-like file and save it out on the network w/o fear
>that it can be cracked. Can someone suggest some (and
>reasonable) third party tools for something basic like
>this?

Friday, March 9, 2012

Encrypt Passwords

I would like to put all my sa and other passwords into a
text-like file and save it out on the network w/o fear
that it can be cracked. Can someone suggest some (and
reasonable) third party tools for something basic like
this?You may want to look at using something like Whisper 32.
It's free and available at:
http://www.ivory.org/index.html
-Sue
On Tue, 20 Jul 2004 13:32:07 -0700, "Blnt"
<anonymous@.discussions.microsoft.com> wrote:
>I would like to put all my sa and other passwords into a
>text-like file and save it out on the network w/o fear
>that it can be cracked. Can someone suggest some (and
>reasonable) third party tools for something basic like
>this?

Encrypt Passwords

I would like to put all my sa and other passwords into a
text-like file and save it out on the network w/o fear
that it can be cracked. Can someone suggest some (and
reasonable) third party tools for something basic like
this?You may want to look at using something like Whisper 32.
It's free and available at:
http://www.ivory.org/index.html
-Sue
On Tue, 20 Jul 2004 13:32:07 -0700, "Blnt"
<anonymous@.discussions.microsoft.com> wrote:

>I would like to put all my sa and other passwords into a
>text-like file and save it out on the network w/o fear
>that it can be cracked. Can someone suggest some (and
>reasonable) third party tools for something basic like
>this?

Wednesday, March 7, 2012

Enabling Network Protocols Urgent

Hello
I installed MSDE2000 sp3a which disabled network protocols is there a way i can enable them without having to reinstall th
whole thin
Thanks,H
Use the Server Network Utilit
eg
"C:\Program Files\Microsoft SQL Server\80\Tools\Binn\svrnetcn.exe
JBandi

Enabling Network Protocols Urgent

Hello,
I installed MSDE2000 sp3a which disabled network protocols is there a way i
can enable them without having to reinstall the
whole thing
Thanks,HI
Use the Server Network Utility
eg:
"C:\Program Files\Microsoft SQL Server\80\Tools\Binn\svrnetcn.exe"
JBandi

Enabling Network Protocols Urgent

Hello,
I installed MSDE2000 sp3a which disabled network protocols is there a way i can enable them without having to reinstall the
whole thing
Thanks,
HI
Use the Server Network Utility
eg:
"C:\Program Files\Microsoft SQL Server\80\Tools\Binn\svrnetcn.exe"
JBandi

Enabling Network Protocols in MSDE 2000

Hello,
I installed MSDE 2000 it's not accepting connections from
any machine i think the network protocols got disabled is
there a way to enable them rather than installing again
MSDE installs a tool called srvnetcn.exe that can be used to configure the
network protocols of an MSDE instance. It is located in
Program Files\Microsoft SQL Server\80\Tools\Binn
Jim
"sch" <anonymous@.discussions.microsoft.com> wrote in message
news:1a4e501c41d83$c6d49b80$a101280a@.phx.gbl...
> Hello,
> I installed MSDE 2000 it's not accepting connections from
> any machine i think the network protocols got disabled is
> there a way to enable them rather than installing again
|||Hi Jim,
Actually svrnetcn.exe.
HTH,
Greg Low (MVP)
MSDE Manager SQL Tools
www.whitebearconsulting.com
"Jim Young" <thorium48@.hotmail.com> wrote in message
news:OYHIoBaHEHA.2300@.tk2msftngp13.phx.gbl...
> MSDE installs a tool called srvnetcn.exe that can be used to configure the
> network protocols of an MSDE instance. It is located in
> Program Files\Microsoft SQL Server\80\Tools\Binn
> Jim
>
> "sch" <anonymous@.discussions.microsoft.com> wrote in message
> news:1a4e501c41d83$c6d49b80$a101280a@.phx.gbl...
>
|||Thanks Very Much Guys!
|||
>--Original Message--
>MSDE installs a tool called srvnetcn.exe that can be
used to configure the
>network protocols of an MSDE instance. It is located in
>Program Files\Microsoft SQL Server\80\Tools\Binn
>Jim
>
>"sch" <anonymous@.discussions.microsoft.com> wrote in
message[color=darkblue]
>news:1a4e501c41d83$c6d49b80$a101280a@.phx.gbl...
from[color=darkblue]
is
>
>.
>works great, thanks Jim

Sunday, February 26, 2012

enabled/disabled protocols for an msde instance

Hi folks,
Wondering if someone could help me out with an msde/windows sp2 problem.
Upon installing sp2, the network protocols for my msde instance become
disabled: Sm, Np, Tcp, Via. Is there a command line syntax I can use to
re-enable these network protocols? Or is there a windows interface to enable
them? basically my msde instance is now standalone, no other workstations
can talk to that sql instance. I can't install sp3 for msde because the
manufcaturer used merge modules (bleh!).
Any help would be greatly appreciated.
Thanks,
S. Purkiss
sheldon@.REMOVETHISthedoctorcompany.com
hi,
"S Purkiss" <shel@.shel.com> ha scritto nel messaggio
news:w7idnY9fmfsFnOLcRVn-rA@.rogers.com
> Hi folks,
> Wondering if someone could help me out with an msde/windows sp2
> problem.
> Upon installing sp2, the network protocols for my msde instance become
> disabled: Sm, Np, Tcp, Via. Is there a command line syntax I can
> use to re-enable these network protocols? Or is there a windows
> interface to enable them? basically my msde instance is now
> standalone, no other workstations can talk to that sql instance. I
> can't install sp3 for msde because the manufcaturer used merge
> modules (bleh!).
> Any help would be greatly appreciated.
please run Server Network Utility (svrnetcn.exe) and re-enable the desired
protocol...
with MSDE sp2 level you are exposed at Slammer/Saphire troubles, which have
ben solved with service pack 3 - 3/a..
lot of security problems has been addressed to with that sp, so please
"force" your ISV to ship sp3, as it's been out for quite 1 year, and it
should already had enougth time to test and ship it...
my $0.02
Andrea Montanari (Microsoft MVP - SQL Server)
http://www.asql.biz/DbaMgr.shtmhttp://italy.mvps.org
DbaMgr2k ver 0.9.1 - DbaMgr ver 0.55.1
(my vb6+sql-dmo little try to provide MS MSDE 1.0 and MSDE 2000 a visual
interface)
-- remove DMO to reply

Friday, February 24, 2012

enable TCPIP Protocols by script

How do you enable TCPIP in Protocols for Network Config for the sql server
2005 and for all the specific IP addressses via T-SQL script.> How do you enable TCPIP in Protocols for Network Config for the sql server
> 2005 and for all the specific IP addressses via T-SQL script.
I do not know for T-SQL, but I guess you can do it with SMO or WMI. Here is
a VBScript script that uses WMI to enlist the protoclos and enable named
Pipes:
' enum protocols and show status
set wmi =
GetObject("WINMGMTS:\\. \root\Microsoft\SqlServer\ComputerManage
ment")
for each prop in wmi.ExecQuery("select * " & _
"from ServerNetworkProtocol " & _
"where InstanceName = 'mssqlserver'")
WScript.Echo prop.ProtocolName & " - " & _
prop.ProtocolDisplayName & " " & _
prop.Enabled
next
' enable named pipes
for each changeprop in wmi.ExecQuery("select * " & _
"from ServerNetworkProtocol " & _
"where InstanceName = 'mssqlserver' and " & _
"ProtocolName = 'Np'")
changeprop.SetEnable()
next
Dejan Sarka
http://www.solidqualitylearning.com/blogs/|||BTW, you have to restart the service if you want changes in network
protocols to take effect.
Dejan Sarka
http://www.solidqualitylearning.com/blogs/
"Dejan Sarka" <dejan_please_reply_to_newsgroups.sarka@.avtenta.si> wrote in
message news:eRGorcHRHHA.412@.TK2MSFTNGP02.phx.gbl...
> I do not know for T-SQL, but I guess you can do it with SMO or WMI. Here
> is a VBScript script that uses WMI to enlist the protoclos and enable
> named Pipes:
> ' enum protocols and show status
> set wmi =
> GetObject("WINMGMTS:\\. \root\Microsoft\SqlServer\ComputerManage
ment")
> for each prop in wmi.ExecQuery("select * " & _
> "from ServerNetworkProtocol " & _
> "where InstanceName = 'mssqlserver'")
> WScript.Echo prop.ProtocolName & " - " & _
> prop.ProtocolDisplayName & " " & _
> prop.Enabled
> next
> ' enable named pipes
> for each changeprop in wmi.ExecQuery("select * " & _
> "from ServerNetworkProtocol " & _
> "where InstanceName = 'mssqlserver' and " & _
> "ProtocolName = 'Np'")
> changeprop.SetEnable()
> next
>
> --
> Dejan Sarka
> http://www.solidqualitylearning.com/blogs/
>|||This does not enable the TCPIP, change the enable setting from NO to YES in
the TCP/IP properties. Do you have to do any update statement in WMI? I
haven't used WMI before. I did stop and restart my sql server.
I changed your code from Np to tcp as I think that was for named pipes not
tcp .
Any help would be gratefully received
thanks
"Dejan Sarka" wrote:

> I do not know for T-SQL, but I guess you can do it with SMO or WMI. Here i
s
> a VBScript script that uses WMI to enlist the protoclos and enable named
> Pipes:
> ' enum protocols and show status
> set wmi =
> GetObject("WINMGMTS:\\. \root\Microsoft\SqlServer\ComputerManage
ment")
> for each prop in wmi.ExecQuery("select * " & _
> "from ServerNetworkProtocol " & _
> "where InstanceName = 'mssqlserver'")
> WScript.Echo prop.ProtocolName & " - " & _
> prop.ProtocolDisplayName & " " & _
> prop.Enabled
> next
> ' enable named pipes
> for each changeprop in wmi.ExecQuery("select * " & _
> "from ServerNetworkProtocol " & _
> "where InstanceName = 'mssqlserver' and " & _
> "ProtocolName = 'Np'")
> changeprop.SetEnable()
> next
>
> --
> Dejan Sarka
> http://www.solidqualitylearning.com/blogs/
>
>

Enable SSL

I have read the MSDN articles about setting up SSL on the SQL server. I am
running Microsoft Certificate services on my network as well. The article t
alks about the following
Enter the fully qualified domain name of your computer in the Name: text box
. Ping your computer to get the fully qualified domain name if you are not s
ure what it is.
In the Intended Purpose section, change the selection to Server Authenticati
on Certificate by using the drop-down list box from the Client Authenticatio
n Certificate.
I cannot seem to find these options anywhere...How do I change the FQDN if I
have no name field...I don't even have an intended purpose dropdown list.
I can issue a computer certificate from the MMC on the SQL Server but it doe
s not use the FQDN of the c
luster I am trying to setup. How can I get this to work if I cannot see the
options that these articles are telling me? I am logging in with Domain Ad
min rights as well.
Ignore my last post...I forgot my email address...That article is if you make a http request to a Standalone Certificate
Cerver.
If you have a standalone CA you have to use http request to request the
cert. Follow this article:
276553 HOW TO: Enable SSL Encryption for SQL Server 2000 with Certificate
Server
http://support.microsoft.com/?id=276553
If you installed the Enterprise CA as part of Active Directory, then you
can use MMC. Follow this article.
316898 HOW TO: Enable SSL Encryption for SQL Server 2000 with Microsoft
http://support.microsoft.com/?id=316898
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.