Microsoft SQL Server 2008 R2 Unleashed- P195:SQL Server 2005 provided a number of significant new features and enhancements over what was available in SQL Server 2000. This is not too surprising considering there was a five-year gap between these major SQL Server 2008 is not as much of a quantum leap forward from SQL Server 2005 | 1934 CHAPTER 48 SQL Server Web Services ALTER AUTHORIZATION ON ENDPOINT EPT_SQL2008UnleashedExamples TO MyDomain SomeOtherUser Next the STATE keyword indicates the initial state of the endpoint. Much as in Windows services the possible states are STOPPED STARTED and DISABLED. For security s sake STOPPED is the default. To change the state of any endpoint you again invoke the ALTER ENDPOINT syntax. The following example stops the endpoint ALTER ENDPOINT EPT_SQL2008UnleashedExamples STATE STOPPED Again don t do this until you are done with the examples The AS HTTP Keyword Group The AS HTTP statements describe the protocol ports virtual path and TCP IP bindings for the endpoint. This keyword group is of interest to security professionals because this is where you can implement IP restrictions authentication and other lockdown mechanisms. In the example shown in Listing HTTP is the transport protocol. But you could just as easily use TCP if your application demands it when creating a TCP endpoint you specify AS TCP instead of AS HTTP. Then you add the following parameters LISTENER_PORT Specifies an integer-valued port number on which the server listens for incoming requests. The default is 4022. LISTENER_IP Specifies an incoming IP address on which the TCP listener accepts connections. The default is the keyword ALL that is listening on all IP addresses . Next you specify that the AUTHENTICATION method is INTEGRATED. Microsoft recommends INTEGRATED which includes both KERBEROS and NTLM and KERBEROS as the most secure ways of authenticating to endpoints although they are not necessarily platform-independent ways. This approach is in contrast to using BASIC or DIGEST authentication. In case the endpoint consumer requires BASIC authentication SQL Server requires that the HTTP port of the web service be secured via Secure Sockets Layer SSL . NOTE Using BASIC authentication allows for the additional keyword DEFAULT_LOGON_DOMAIN to specify the domain under which users .
