Skip to content

Tag Archives: http

SQL 2005 SOAP Endpoint Security and its problems

Again with the security, this time while workout out how SOAP HTTP Endpoints work and I have two issues with it.

First, its only possible to change the execution context of the call when it reaches the target stored procure or function and only then by defining the object using ‘Execute As’. By this time the [...]

Tracing SQL SOAP Endpoints through HTTP.sys

While trying to find out where the HTTP Authentication was carried out when a HTTP request is made to a SQL Server 2005 SOAP Endpoint I was sucked into a tracing rat hole. SQL Server 2005 HTTP endpoints using the Windows system HTTP stack commonly known by its file name HTTP.sys. All HTTP applications on [...]