SQLServer实战经验分享－－ServiceBroker安全配置和使用示例

核心提示： CREATECERTIFICATEmsgOperactionProcessServiceCertPubAUTHORIZATIONmsgOperationProcessServiceUserFROMFILE='X:**msgOperactionProcessServiceCertPu

CREATECERTIFICATEmsgOperactionProcessServiceCertPubAUTHORIZATIONmsgOperationProcessServiceUser
FROMFILE='X:**msgOperactionProcessServiceCertPub.cer';

建立目标服务远程服务绑定

CREATEREMOTESERVICEBINDINGToMsgOperactionProcessService
TOSERVICE'http://Samples/SQL/ServiceBroker/msgOperationProcessService'
WITHUSER=msgOperationProcessServiceUser;

目标方

创建拥有服务的用户

CREATEUSERmsgOperationProcessServiceUserWITHOUTLOGIN;
ALTERAUTHORIZATIONONSERVICE::[http://Samples/SQL/ServiceBroker/msgOperationProcessService]TOmsgOperationProcessServiceUser;

创建与该用户关联的私钥证书

CREATECERTIFICATEmsgOperactionProcessServiceCertPrivAUTHORIZATIONmsgOperationProcessServiceUser
WITHSUBJECT='ForMsgOperactionProcessService',
START_DATE='01/01/2009',
EXPIRY_DATE='01/01/2100';

将公钥证书备份到文件以供初始方服务使用

BACKUPCERTIFICATEmsgOperactionProcessServiceCertPriv
　　TOFILE='X:**msgOperactionProcessServiceCertPub.cer';

创建调用初始服务的用户

CREATEUSERmsgOperationInitServiceUserWITHOUTLOGIN;

导入初始服务的证书并把刚才创建的用户设为所有者

CREATECERTIFICATEmsgOperactionInitServiceCertPubAUTHORIZATIONmsgOperationInitServiceUser
FROMFILE='X:**msgOperactionInitServiceCertPub.cer';