Configure MSSQL 2008 to use kerberos authentication

Question

I would like to set my current mssql db (2008 and 2012) to authenticate using a linux kerberos server that I have in my environment .

The windows station is in a workgroup and I would like to avoid having to setup a domain controller and active directory .

How can I accomplish that ? what do I need to configure on the windows side and the kerberos server side (assuming it's configured already to work with other dbs running on linux based OSes) ?

score 1 · Answer 1 · answered Mar 30 '14 at 20:16

1

Yes this is manageable. All you need is a trusted connection to an odbc connector and you can read about that here: http://technet.microsoft.com/en-us/library/hh568450.aspx

answered Mar 30 '14 at 20:16

Rob Wahl

11
1

Thanks @robwahl for the answer. I need to configure it for jdbc which I did , but I'm getting some error message 'Server not found in Kerberos database Application/Function: Anything that makes a service ticket request. Potential Causes and Solution: The account for the service principal name being requested doesn't exist in Active Directory or is incorrect in Active Directory. This could also indicate a DNS problem.' any hints? – John Doe Mar 31 '14 at 12:20

score 1 · Answer 2 · answered Mar 31 '14 at 22:28

I suspect that you're going to have to "trick" windows into natively authenticating against the linux kerberos server, which might be more effort than you're looking for. Things I found include:

This O'Reilly article
PGina is old and doesn't include Kerberos out of the box, but you could write a plugin (yikes).
Use SAMBA and FreeIPA to create a trust with your linux kerberos server

Or, you could use SQL Server authentication instead.

Configure MSSQL 2008 to use kerberos authentication

2 Answers2