Got hacked and now cannot Generate SSPI context

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Sydney Lotterby - 27 Dec 2005 22:45 GMT

(DC=AdvServer200; SQL 2000; wkstation XP pro (logged into domain with Admin
rights) -- all with latest SPs applied).
We just got hacked via ftp and have strengthened our Administrator pwd. Now
I cannot use EM or connect to a db with existing programs (I can connect
using SQL Server Authentication) I know this has to be a
password/authentication problem. Just don't know what/where I need to
change the passwords in SQL. Any specific help welcome.

Reply to this Message

Andy Davis - 28 Dec 2005 12:19 GMT

Hi,
how do you know that you are hacked ! have you check with any IDS system !
1). is your sql server running on default port (1433) , change it
2). is your Administrative account have weak password , tighten it with
strong password mechanism
3). Rename Administrative Account
4). Change your file system to NTFS and set permissions
5). Install Firewall and set the proper rule

is this you wants ! if not please be more specific !

Regards

Signature

Andy Davis
Activecrypt Team
--------------------------------------------
SQL Server Encryption Software
http://www.activecrypt.com

> (DC=AdvServer200; SQL 2000; wkstation XP pro (logged into domain with Admin
> rights) -- all with latest SPs applied).
[quoted text clipped - 3 lines]
> password/authentication problem. Just don't know what/where I need to
> change the passwords in SQL. Any specific help welcome.

Reply to this Message

Sydney Lotterby - 28 Dec 2005 13:06 GMT

The fact that we were hacked is not my major concern.
Since we changed our Domain Admin pwd, the following is what I need an
answer for ...

>> I cannot use EM or connect to a db with existing programs (I can connect
>> using SQL Server Authentication) I know this has to be a
>> password/authentication problem. Just don't know what/where I need to
>> change the passwords in SQL. Any specific help welcome.

> Hi,
> how do you know that you are hacked ! have you check with any IDS system !
[quoted text clipped - 18 lines]
>> password/authentication problem. Just don't know what/where I need to
>> change the passwords in SQL. Any specific help welcome.

Reply to this Message

Andy Davis - 29 Dec 2005 04:25 GMT

Hi,

> >> I cannot use EM or connect to a db with existing programs (I can connect
> >> using SQL Server Authentication) I know this has to be a
> >> password/authentication problem. Just don't know what/where I need to
> >> change the passwords in SQL. Any specific help welcome.

1). Would you look if the password is saved or is set not to ask when
connecting
--> right click on server (the one you register and wont let you login ) ->
Edit SQL Server REgistration Properties -> Select the SQL Authentication
if you wont able to log in using Windows Authentication , Log in using SQL
Authentication then open server -> go to security section -> now check if the
windows user (the one you use to log in windows ) is their and has proper
privilege set .

BTW what error message it gives while you try to logging in...!?

Regards

Signature

Andy Davis
Activecrypt Team
--------------------------------------------
SQL Server Encryption Software
http://www.activecrypt.com

Reply to this Message

Sydney Lotterby - 29 Dec 2005 16:53 GMT

Answer was to change LogOn password for MSSQLSERVER service on the server
that is running SQL.
It is now working.
The message was as I cited in subject line: "Cannot generate SSPI context"

> Hi,
>> >> I cannot use EM or connect to a db with existing programs (I can
[quoted text clipped - 18 lines]
>
> Regards

Reply to this Message