Microsoft SQL Server

Estimated reading: 4 minutes 58 views

The MyPass Connector for MSSQL is used by the Mypass Cloud to reset passwords for internal database users on MSSQL systems. The connector is installed on your Gateway server by default.

MyPass Cloud supports easy integration into multiple MSSQL systems from a single implementation.  The communication to the MSSQL is done from the Gateway server. The integration is implemented using TCP communication, and this can optionally be implemented to use encryption. Technically, it connects to the database and executes a stored procedure with the actual logic to reset the password of the MSSQL user. The stored procedure has to be installed before the connector will work. MyPass Cloud requires the following parameters to be configured to be able to access an MSSQL server.

PARAMETER DESCRIPTION
Hostname
A fully qualified hostname, a hostname or an IP address
Port
The Port that the server is listening on for the specified instance
Database
The Database in which the Stored Procedure is implemented
Stored Procedure
The name of the Stored Procedure to be called
Account
The name for the account with privileges to execute “alter login...” commands
Password
The password for the account specified
Encryption
Boolean value which decides whether or not encryption shall be used. Encryption requires extra configuration on the server. See www.microsoft.com for details

The various parameters are not actually used by the Connector but are just used to construct a valid formatted MSSQL Connection String, which can be customized beyond the rules of the listed parameters.

Configuring MSSQL Settings for Connector
  • Open the “SQL Server Configuration Manager” through the “Start”, “Microsoft SQL Server”, “Configuration Tools”, “SQL Server Configuration Manager” menu.
  • Navigate the “Protocols for …” and select the “TCP/IP” protocol and select “Properties” from the context menu.
  • In the “Protocol” tab select “Yes” for the “Enabled” property.
  • In the “IP Addresses” tab, specify the desired port (e.g. 1433) for the “TCP Port” under the “IP All” section, or a different one if desired. After selecting “OK” , the following prompt will be shown.
  • Now restart the MSSQL service to complete the configuration.
Configuring MSSQL Database System Account
  • Open the “Microsoft SQL Server Management Studio” and connect as “SA” or any other administrator account.
  • Navigate to the “Security” node and expand to the “Logins” node.
  • From the context menu of the “Logins” node select “New Login”.
  • With the “General” page selected specify the “Login name”; select the “SQL Server authentication” and specify a valid password. Make proper choices for the other selections and then select the “Server Roles” page.
  • Select the “sysadmin” server role and click “OK”.
Configuring MSSQL Stored Procedure For Connector
  • Open the “Microsoft SQL Server Management Studio” and connect as “SA” or any other administrator account (possibly also the newly created account).
  • Navigate to the “Stored Procedures” node under the master database.
  • Click on the “New Stored Procedure” from the context menu of the “Stored Procedure” node.
  • The stored procedure code can be obtained from your MyPass Cloud engineer. Past this code into the window and and click on the “! Execute” button on the toolbar.
  • Expand the “Stored Procedures” node and select the “FPC_ResetPassword” node, and select “Execute” on its context menu.
  • Fill in the parameters and click “OK” to execute.

If successful, the result will be shown as this, and the configured environment is now ready to be used by the MyPass Cloud platform.

SQL Configuration Testing

Your MyPass Cloud engineer can provide you with a simple testing tool that will allow you to test your stored procedure and account configuration before providing all details for integration.

The tool allows you to validate various operations like “Check Connection”, “Reset Password” and “Change Password”. Logging is also provided in the folder “C:\TargetLogs” and is in “Debug” LogLevel, meaning that a lot of details are written to these logs for troubleshooting purposes.

Please contact us if you struggling, we would be more than happy to help. You can find us at [email protected].