Re: How to - Linked Servers & Passthrough authentication?
From: Peter A. Schott (pschott_at_no.spamm.hear.drivefinancial.com)
Date: 06/22/05
- Previous message: Simo Sentissi: "c2 failed login correlation to an origination IP/host ?"
- In reply to: Alejandro Mesa: "RE: How to - Linked Servers & Passthrough authentication?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 22 Jun 2005 15:20:23 -0500
setspn.exe was the piece I was missing. Running that command along the lines
of:
setspn MSSQLSvc/MyServer MyDomain\serviceaccount
worked as far as I can tell.
Thanks for the pointer.
-Pete
"Alejandro Mesa" <AlejandroMesa@discussions.microsoft.com> wrote:
> Security Account Delegation
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad_security_2gmm.asp
>
> How To: Implement Kerberos Delegation for Windows 2000
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT05.asp
>
>
> AMB
>
> "Peter A. Schott" wrote:
>
> > Has anyone managed to set up their SQL Servers to pass through the NT Login to
> > a linked SQL Server? We run several queries that grab data from another box
> > and pull it down to a test/dev region using linked servers.
> >
> > I realize that we need to do more configuration on the Windows server itself,
> > but have not had a lot of success so far.
> >
> > I've enabled delegation for the server in AD to allow any service (this is a
> > dev box). I've also enabled the Service account to allow delgation to any
> > service.
> >
> > Has anyone done this? Can you pass on whatever steps I'm missing?
> >
> > Thanks in advance.
> >
> > -Pete Schott
> >
- Previous message: Simo Sentissi: "c2 failed login correlation to an origination IP/host ?"
- In reply to: Alejandro Mesa: "RE: How to - Linked Servers & Passthrough authentication?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|