Authentication locking mechanism on SQL 2000 CE

Dear Sir/Mam,
Kindly let me know that whether it is possible to set
authentication locking mechanism that will provide the
feature for disabling user accounts after 2 unsuccessful
login attempts and automatic password expiry on SQL 2000
clients.
Regards
Vetrivel.S
There is no such feature on SQL Server 2000. SQL 2005 will provide features
in those areas but it is a little ways off yet. If you need that capability
I suggest you use the Windows security mode and not the SQL Server security.
That way you can take advantage of all these features built in to Windows
security already.
Andrew J. Kelly SQL MVP
"Vetrivel" <vetkar123@.rediffmail.com> wrote in message
news:4a7a01c4739a$7f79c0e0$a301280a@.phx.gbl...
> Dear Sir/Mam,
> Kindly let me know that whether it is possible to set
> authentication locking mechanism that will provide the
> feature for disabling user accounts after 2 unsuccessful
> login attempts and automatic password expiry on SQL 2000
> clients.
> Regards
> Vetrivel.S

Audit Tables and triggers

Dear Group,

I would like to create an audit table that is created with a trigger that
reflects all the changes(insert, update and delete) that occur in table.

Say I have a table with

Subject_ID, visit_number, dob, weight, height, User_name, inputdate

The audit table would have .

Subject_ID, visit_number, dob, weight, height, User_name, inputdate,
edit_action, edit_reason.

Where the edit_action would be insert, update, delete; the edit_reason would
be the reason given for the edit.

Help with this would be great, since I am new to the world of triggers.

Thanks,

JeffJeff Magouirk (magouirkj@.njc.org) writes:
> I would like to create an audit table that is created with a trigger that
> reflects all the changes(insert, update and delete) that occur in table.
> Say I have a table with
> Subject_ID, visit_number, dob, weight, height, User_name,
> inputdate
> The audit table would have .
> Subject_ID, visit_number, dob, weight, height, User_name, inputdate,
> edit_action, edit_reason.
> Where the edit_action would be insert, update, delete; the edit_reason
> would be the reason given for the edit.
> Help with this would be great, since I am new to the world of triggers.

If you need to do to this on a broad scale, consider 3rd-party solutions.
Two that I usually recommend - although I've used none of them myself -
is SQLAudit from Red Matrix and Entegra from Lumigent. SQL Audit is
based on triggers, Entegra works from the transaction log.

But for a one-shot you could do:

CREATE TRIGGER tbl_audit_tri ON tbl FOR INSERT, UPDATE, DELETE

IF @.@.rowcount = 0
RETURN

IF EXISTS(SELECT * FROM inserted)
BEGIN
INSERT logtable (subject_id, ... edit_action)
SELECT subject_id, ...
CASE WHEN EXISTS (SELECT * FROM deleted)
THEN 'UPDATE'
ELSE 'INSERT'
FROM inserted
END
ELSE
BEGIN
INSERT logtable (subject_id, ... edit_action)
SELECT subject_id, ..., 'DELETE'
FROM delete
END

As you see I have left out edit_reason. This is because I don't know
what you mean with "edit_reason", and anyway it sounds like something
that can be quite difficult to get hold of from the trigger.

--
Erland Sommarskog, SQL Server MVP, esquel@.sommarskog.se

Books Online for SQL Server SP3 at
http://www.microsoft.com/sql/techin.../2000/books.asp

Attempt to fetch logical page (1:250637)

Dear Sir,
We have found this error in our database log:
Attempt to fetch logical page (1:250637) in database 'SMS' belongs to
object 't_SMSTbl', not to object 'TempSMSCDRTbl'.
We also read the last post at
12/3/2003 12:26:00 PM by Steven and Baisong Wei title "Attempt to fetch
logical page... Error 605".
But we have already run DBCC CheckDB (with index included) but no errors
found. The Disk space is enough. The DataBase space is enough.
So we want to know what other matters will cause this kind of error.
Thanks a lot.
Fai
*** Sent via Developersdex http://www.codecomments.com ***
Don't just participate in USENET...get rewarded for it!
What's the error number Fai, taht you see in thesql error logs?
Vikram Jayaram
Microsoft, SQL Server
This posting is provided "AS IS" with no warranties, and confers no rights.
Subscribe to MSDN & use http://msdn.microsoft.com/newsgroups.

Attempt to fetch logical page (1:250637)

Dear Sir,
We have found this error in our database log:
Attempt to fetch logical page (1:250637) in database 'SMS' belongs to
object 't_SMSTbl', not to object 'TempSMSCDRTbl'.
We also read the last post at
12/3/2003 12:26:00 PM by Steven and Baisong Wei title "Attempt to fetch
logical page... Error 605".
But we have already run DBCC CheckDB (with index included) but no errors
found. The Disk space is enough. The DataBase space is enough.
So we want to know what other matters will cause this kind of error.
Thanks a lot.
Fai
*** Sent via Developersdex http://www.codecomments.com ***
Don't just participate in USENET...get rewarded for it!What's the error number Fai, taht you see in thesql error logs?
Vikram Jayaram
Microsoft, SQL Server
This posting is provided "AS IS" with no warranties, and confers no rights.
Subscribe to MSDN & use http://msdn.microsoft.com/newsgroups.

Attacking our SQL Server

Dear Sir/Madam,
Hello,
Since 2 years ago we send some information to our remote
SQL Server on a dedicated server every 5 minutes without
any problem, but yesterday a hacker , delete many of our
information on a remote SQL Server, I really don't know
how he/she did it, but after that I changed the SQL Server
port from 1433 to a private port , change all Logins in
security section of SQL Server Enterprise Manager ,
Windows passwords and setup a firewall to protect our
server, but unfortunately tonight , hacker again attack
our site and again change all of our data in SQL Server.
Because of firewall setting, I'm sure that he/she cannot
login to our server from private port and I think that
he/she try to login from http port, and because of our web
server we cannot change our http port to a private port.
I really don't know that how can I secure more our SQL
server and rid from hacker.
By the way both SQL Server and Windows are full update.
Please help me as soon as possible
Yours Sincerely,
JohnOn Thu, 17 Jun 2004 20:11:07 -0700, "John" <ah_yousefi@.yahoo.com>
wrote:

>Since 2 years ago we send some information to our remote
>SQL Server on a dedicated server every 5 minutes without
>any problem, but yesterday a hacker , delete many of our
>information on a remote SQL Server, I really don't know
>how he/she did it, but after that I changed the SQL Server
>port from 1433 to a private port , change all Logins in
>security section of SQL Server Enterprise Manager ,
>Windows passwords and setup a firewall to protect our
>server, but unfortunately tonight , hacker again attack
>our site and again change all of our data in SQL Server.
>Because of firewall setting, I'm sure that he/she cannot
>login to our server from private port and I think that
>he/she try to login from http port, and because of our web
>server we cannot change our http port to a private port.
>I really don't know that how can I secure more our SQL
>server and rid from hacker.
>By the way both SQL Server and Windows are full update.
>Please help me as soon as possible
You let the hacker in, then closed all the doors you knew about. The
hacker may very well have added a backdoor or remote management tool,
made his account administrator on the box, created an SA equivalent
account and any number of other changes that could allow him entry at
any time. He may have been there for years and you didn't realize it
until the data got altered.
Nuke the box. Rebuild from scratch, and only restore data from a know
clean backup. Learn from this and move on.
Jeff

Attacking our SQL Server

Dear Sir/Madam,
Hello,
Since 2 years ago we send some information to our remote
SQL Server on a dedicated server every 5 minutes without
any problem, but yesterday a hacker , delete many of our
information on a remote SQL Server, I really don't know
how he/she did it, but after that I changed the SQL Server
port from 1433 to a private port , change all Logins in
security section of SQL Server Enterprise Manager ,
Windows passwords and setup a firewall to protect our
server, but unfortunately tonight , hacker again attack
our site and again change all of our data in SQL Server.
Because of firewall setting, I'm sure that he/she cannot
login to our server from private port and I think that
he/she try to login from http port, and because of our web
server we cannot change our http port to a private port.
I really don't know that how can I secure more our SQL
server and rid from hacker.
By the way both SQL Server and Windows are full update.
Please help me as soon as possible
Yours Sincerely,
John
"John" <ah_yousefi@.yahoo.com> wrote in message
news:1e16601c454e2$0f479cb0$a501280a@.phx.gbl...
> Since 2 years ago we send some information to our remote
> SQL Server on a dedicated server every 5 minutes without
> any problem, but yesterday a hacker ,<snip>
I see you received a reply in the *.security newsgroup. Please do not
multi-post.
Steve
|||All the patching, IDS and firewalls in the world won't stop a lame SQL
Injection point.
Learn about it and make sure that you don't get jacked again.
Tim
"John" <ah_yousefi@.yahoo.com> wrote in message
news:1e16601c454e2$0f479cb0$a501280a@.phx.gbl...
> Dear Sir/Madam,
> Hello,
> Since 2 years ago we send some information to our remote
> SQL Server on a dedicated server every 5 minutes without
> any problem, but yesterday a hacker , delete many of our
> information on a remote SQL Server, I really don't know
> how he/she did it, but after that I changed the SQL Server
> port from 1433 to a private port , change all Logins in
> security section of SQL Server Enterprise Manager ,
> Windows passwords and setup a firewall to protect our
> server, but unfortunately tonight , hacker again attack
> our site and again change all of our data in SQL Server.
> Because of firewall setting, I'm sure that he/she cannot
> login to our server from private port and I think that
> he/she try to login from http port, and because of our web
> server we cannot change our http port to a private port.
> I really don't know that how can I secure more our SQL
> server and rid from hacker.
> By the way both SQL Server and Windows are full update.
> Please help me as soon as possible
> Yours Sincerely,
> John