Re: Integrated Windows Authentication

"Korosi, Nick" <[email protected]>
Newsgroups gmane.comp.db.tds.freetds
Message-ID <[email protected]>
Thanks for the information.   I do have all of these bases covered, however I found this today:
http://comments.gmane.org/gmane.comp.db.tds.freetds/13287

The version I have is the "official patched 0.82 version" from http://freetds.sourceforge.net/.   I've also tried applying the "post 8.82 patch" and seem to have something wrong with the syntax...  I am a novice in this area.  I did edit the tds_dstr_copy(&connection->server_name, tmp) function call manually in connectparams.c and still am not having any luck.

I assume that after initializing kinit, I can simply run "tsql -S <SERVER>" and authentication would be automatic, correct?  When doing this tsql is still telling me that I'm missing the -U argument.

Thanks,
Nick




-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of James K. Lowden
Sent: Monday, March 21, 2011 9:30 PM
To: [email protected]
Subject: Re: [freetds] Integrated Windows Authentication

On Mon, 21 Mar 2011 23:12:34 +0000
"Korosi, Nick" <[email protected]> wrote:

> I was wondering if it's possible pass the current users credentials to Microsoft SQL Server using integrated authentication so that the user doesn't have to type in their password in clear text.  I have Samba/Winbind installed and the Linux server is a member of the domain.  The user is logging into the shell with their domain username and password as well.

http://freetds.schemamania.org/91/userguide/kerberos.htm
http://freetds.schemamania.org/91/userguide/config.htm#EVERYONE

Yes.  All you need is Kerberos:

1.  Kerberos has use Active Directory
2.  kinit(1) and sclient(1) should work
3.  FreeTDS is configured with --enable-krb5 4.  you've linked in the Kerberos libraries

then it should Just Work.  The utilities in the current snapshot don't even require -U and -P; they attempt a Kerberos/SSPI login if no username is provided.  

--jkl
_______________________________________________
FreeTDS mailing list
[email protected]
http://lists.ibiblio.org/mailman/listinfo/freetds
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.