Re: Can't access linked server, except from

Mogens Nielsen - WM-Data A/S wrote:
I think this is not of much help...
Maybe someone else has a clue !?

Thank you again for your answers. I found the problem :
it's was "double hop" authentification problem.
In active directory, you need to activate delegation for
the user of the account of the SQL Server service, and for
the computer.

I have manually registred with setspn my linked server:
setspn -A MSSQLSvc/server.mydomaine.local:1433 account
(and not :
setspn -A MSSQLSvc/server:1433 account
nor
setspn -A MSSQLSvc/server:1433 mydomaine\account).

Now, all is OK.

Jidé.


.

Relevant Pages

  • Re: KDC Service Account
    ... Part of the KB is creating a KDC Service Account, ... Do I run setspn on the OWA server or domain controller? ... IIS and Kerberos Part 1 - What is Kerberos and how does it work? ...
    (microsoft.public.inetserver.iis.security)
  • RE: Kerberos & NTLM on IIS 6
    ... setspn -A HTTP/servername.domain.com domain\newaccountname ... Is reporting services the SQL server reporting services? ... >> account is known by AD and has a valid SPN, that's why the Web App works. ... I thought at least the default Network Services ...
    (microsoft.public.inetserver.iis.security)
  • SETSPN breaks access to IIS web site
    ... I used SETSPN to create a servicePrincipalName for the account I'm ... To confirm that SETSPN was the problem, I deleted the SPN using SETSPN ... IIS server, which was a member of Administrators on the server, could ...
    (microsoft.public.win2000.security)
  • RE: Integrated Security fails using machine name, succeeds using FQN
    ... I think you have an SPN problem. ... by running setspn -l domain\user. ... If your app pool is running under a system account, ... registered for the DNS alias to the machine name by running setspn -l foobar. ...
    (microsoft.public.inetserver.iis.security)
  • Re: KDC Service Account
    ... Do I run setspn on the OWA server or domain controller? ... you specify the Service Principal Name you wish to register (whether that be under a computer account or user account). ... IIS and Kerberos Part 1 - What is Kerberos and how does it work? ...
    (microsoft.public.inetserver.iis.security)