Showing posts with label clients. Show all posts
Showing posts with label clients. Show all posts

Wednesday, March 28, 2012

Need to build a search stored procedure

I have a few textboxes on a page that I would like to use as a search page and have clients shown in a gridview that meet the users entry into one or more of the textboxes.

I have ClientID, LastName, FirstName, Address, and Keywords. How would I build a stored procedure to allow me to do this?

This question has been answered several times in this forum. Please search for "dynamic where"/similar keywords.|||

What is the standard way of creating a search page of this sort?

|||

This thread discusses the SQL LIKE clause and dynamic queries... should be helpful:

http://forums.asp.net/thread/1529167.aspx

|||I searched dynamic where as well as many other keywords and have had no luck in finding any results. Can you offer any additional assistance?|||

SELECT *

FROM Table

WHERE (Column1 = @.col1 OR @.col1 IS NULL)

AND (Column2 = @.col2 OR @.col2 IS NULL)

AND (Column3 = @.col3 OR @.col3 IS NULL)

...

Friday, March 23, 2012

Need some workaround( security question)

We have SQL 2005.
Say our SQL servers are in Domain 'ABC' and our clients are in Domain 'XYZ'
where the domains dont trust one another.
Theres more details but in short,I want to add Windows accounts i.e.
(XYZ\User1,XYZ\User2,etc.) without being authenticated against the domain
controller 'ABC'. When I try to add these Windows logins, it fails since it
wants to authenticate against XYZ but theres no trust.
So how can I bypass the authentication and get those entries added to my SQL
Account? Any way to hack the system tables? If not, thats fine. If theres
anyway to get these entries in the equivalent logins/users tables in the
databases is what I want to accomplish.
Thanks
If I understand what you are asking for, you want to allow connections
to users who say they are in the XYZ domain without any authentication
at all.
As someone who has to rely on SQL Server security I hope there is no
way to do this.
The obvious alternative for users in a non-trusted domain is to use
SQL Server logins, which are domain independent. That requires
individual logins be created, and they have to connect excplicitly by
name with a password
Roy Harvey
Beacon Falls, CT
On Thu, 28 Jun 2007 21:35:33 -0700, "Hassan" <hassan@.hotmail.com>
wrote:

>We have SQL 2005.
>Say our SQL servers are in Domain 'ABC' and our clients are in Domain 'XYZ'
>where the domains dont trust one another.
>Theres more details but in short,I want to add Windows accounts i.e.
>(XYZ\User1,XYZ\User2,etc.) without being authenticated against the domain
>controller 'ABC'. When I try to add these Windows logins, it fails since it
>wants to authenticate against XYZ but theres no trust.
>So how can I bypass the authentication and get those entries added to my SQL
>Account? Any way to hack the system tables? If not, thats fine. If theres
>anyway to get these entries in the equivalent logins/users tables in the
>databases is what I want to accomplish.
>Thanks

Need some workaround( security question)

We have SQL 2005.
Say our SQL servers are in Domain 'ABC' and our clients are in Domain 'XYZ'
where the domains dont trust one another.
Theres more details but in short,I want to add Windows accounts i.e.
(XYZ\User1,XYZ\User2,etc.) without being authenticated against the domain
controller 'ABC'. When I try to add these Windows logins, it fails since it
wants to authenticate against XYZ but theres no trust.
So how can I bypass the authentication and get those entries added to my SQL
Account? Any way to hack the system tables? If not, thats fine. If theres
anyway to get these entries in the equivalent logins/users tables in the
databases is what I want to accomplish.
ThanksIf I understand what you are asking for, you want to allow connections
to users who say they are in the XYZ domain without any authentication
at all.
As someone who has to rely on SQL Server security I hope there is no
way to do this.
The obvious alternative for users in a non-trusted domain is to use
SQL Server logins, which are domain independent. That requires
individual logins be created, and they have to connect excplicitly by
name with a password
Roy Harvey
Beacon Falls, CT
On Thu, 28 Jun 2007 21:35:33 -0700, "Hassan" <hassan@.hotmail.com>
wrote:

>We have SQL 2005.
>Say our SQL servers are in Domain 'ABC' and our clients are in Domain 'XYZ'
>where the domains dont trust one another.
>Theres more details but in short,I want to add Windows accounts i.e.
>(XYZ\User1,XYZ\User2,etc.) without being authenticated against the domain
>controller 'ABC'. When I try to add these Windows logins, it fails since it
>wants to authenticate against XYZ but theres no trust.
>So how can I bypass the authentication and get those entries added to my SQ
L
>Account? Any way to hack the system tables? If not, thats fine. If theres
>anyway to get these entries in the equivalent logins/users tables in the
>databases is what I want to accomplish.
>Thanks

Need some workaround( security question)

We have SQL 2005.
Say our SQL servers are in Domain 'ABC' and our clients are in Domain 'XYZ'
where the domains dont trust one another.
Theres more details but in short,I want to add Windows accounts i.e.
(XYZ\User1,XYZ\User2,etc.) without being authenticated against the domain
controller 'ABC'. When I try to add these Windows logins, it fails since it
wants to authenticate against XYZ but theres no trust.
So how can I bypass the authentication and get those entries added to my SQL
Account? Any way to hack the system tables? If not, thats fine. If theres
anyway to get these entries in the equivalent logins/users tables in the
databases is what I want to accomplish.
ThanksIf I understand what you are asking for, you want to allow connections
to users who say they are in the XYZ domain without any authentication
at all.
As someone who has to rely on SQL Server security I hope there is no
way to do this.
The obvious alternative for users in a non-trusted domain is to use
SQL Server logins, which are domain independent. That requires
individual logins be created, and they have to connect excplicitly by
name with a password
Roy Harvey
Beacon Falls, CT
On Thu, 28 Jun 2007 21:35:33 -0700, "Hassan" <hassan@.hotmail.com>
wrote:
>We have SQL 2005.
>Say our SQL servers are in Domain 'ABC' and our clients are in Domain 'XYZ'
>where the domains dont trust one another.
>Theres more details but in short,I want to add Windows accounts i.e.
>(XYZ\User1,XYZ\User2,etc.) without being authenticated against the domain
>controller 'ABC'. When I try to add these Windows logins, it fails since it
>wants to authenticate against XYZ but theres no trust.
>So how can I bypass the authentication and get those entries added to my SQL
>Account? Any way to hack the system tables? If not, thats fine. If theres
>anyway to get these entries in the equivalent logins/users tables in the
>databases is what I want to accomplish.
>Thankssql