An issue with SQL 2005 and Kerberos...



I am having trouble getting SQL 2005 to authenticate using Kerberos.
Regardless of what I try the authentication always goes through NTLM.
Following is the situation:

We have a test domain setup with a substantial amount of servers. I know
that Kerberos is properly setup in that domain because many different test
SharePoint deployments under different configurations has been successfully
setup and it all cases it has been verified that Kerberos is being used as
the authentication mechanism between servers.

However, all the connections from these SharePoint servers to the SQL Server
2005 servers are authenticating using NTLM. The way I am checking the
authentication mechanism is running the following query and checking the
value displayed in the auth_scheme column:

Use Master
select * from sys.dm_exec_connections

I tried removing IIS from the equation and tested connecting from one SQL
box in the same domain to another one using SQL Server Management Studio. The
results are the same, the server is authenticating using NTLM.

All the SQL instances I am working with are 1+1 Clusters with two active
instances. They are all installed over Windows 2003 Server and with SQL 2005
SP2 applied. I checked in the cluster administrator tool and Kerberos seems
to be enabled (the check box is selected in the cluster name resource and
everything is online).

Could someone give me some guidance on how to troubleshoot this problem?

Thanks!


Camilo


.



Relevant Pages

  • Re: iis problems with some xp clients - kerberos issue?
    ... is the browser even attempting Kerberos Authentication? ... the webserver failing to get a service ticket for the SQL Server etc. ... Check that the site is in IE's Intranet zone (IE doesn't attempt to Kerberos ... Both access SQL ...
    (microsoft.public.inetserver.iis.security)
  • Re: Using Kerberos in Windows 2000 Clustering
    ... Windows 2003 servers drop down to using LAN Manger authentication for ... the information about the cluster’s use of Kerberos and LM isn’t ... client can use this authentication method. ... Does the cluster software also drop down to using LM or will ...
    (microsoft.public.windows.server.clustering)
  • Re: NTP authentication using kerberos
    ... Is it possible to use kerberos in authentication with an ntp server? ... In the handbook regarding kerberos (and nearly every other ... And so far I have only found simple key authentication similar to dhcp ... It's good for NTP servers, ...
    (freebsd-questions)
  • Re: NTP authentication using kerberos
    ... Is it possible to use kerberos in authentication with an ntp server? ... In the handbook regarding kerberos (and nearly every other ... And so far I have only found simple key authentication similar to dhcp ... if you have your own heirarchy of Stratum 1 and perhaps Stratum 2 servers and accurate timing really is critical for you. ...
    (freebsd-questions)
  • Re: An issue with SQL 2005 and Kerberos...
    ... Regardless of what I try the authentication always goes through NTLM. ... We have a test domain setup with a substantial amount of servers. ... I tried removing IIS from the equation and tested connecting from one SQL ... I checked in the cluster administrator tool and Kerberos ...
    (microsoft.public.sqlserver.security)