2

I am developing an asp.net mvc 4 web app which would be hosted on godaddy. I have experience developing for intranet applications where the authentication is done with active directory.

My question is Is there a way to get windows authentication to work for a host like godaddy? I know this can be done by creating a so called 'Virtual Account' and then running the app pool under that identity but since I don't have access to those kinds of options what other methods (if any) are available?

I have spent a lot of time googling but can't find anything that answers my question to the point. The best explanation so far I found was this one

"the best way to connect sql server (Windows authentication vs SQL Server authentication) for asp.net app"

I know I could just use SQL Server authentication but the main problem I have is having to specify the password in the connection string (encrypted or otherwise) which could be accessed by someone. If I use the password in the application code I would have to recompile every time I change my password. Even the answer to the SO question above says it's not good to use SQL Server authentication.

If there is no way to get windows authentication to work then what would be the best way to securely use connection strings for sql server authentication?

Any help would be greatly appreciated.

Update: Ok, I just called up godaddy and they don't allow Windows Authentication. The question might still be helpful for someone with a similar problem, specially if we could explore the various ways to secure the connection strings.

Improve this question
2
  • 1
    Why not ask a godaddy support person? My guess is if you are using a shared server, you will not be able to enable Windows authentication. Commented Jul 25, 2013 at 0:25
  • @rontornambe You were right about that. Commented Sep 12, 2013 at 14:30

1 Answer 1

Reset to default
3

Answer to your Question: what would be the best way to securely use connection strings for sql server authentication

The best way I believe is to encrypt the whole <ConnectionString> in web.config itself.

This link: http://www.beansoftware.com/ASP.NET-Tutorials/Encrypting-Connection-String.aspx is good at explaining the process of encryption both programmatically as well as using CommandLine tool.

OR refer the MSDN here.

after encryption you can access your connection string as usual :

string conn = ConfigurationManager.ConnectionStrings["cn1"].ConnectionString;

You do not have to write any code to decrypt this connection string in your application, ASP.NET automatically decrypts it.

Improve this answer
Sign up to request clarification or add additional context in comments.

Comments

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.