[freetds] NT authen from linux
Craig A. Berry
craigberry at mac.com
Wed Jun 23 08:27:27 EDT 2010
On Jun 21, 2010, at 8:01 AM, Frediano Ziglio wrote:
> 2010/6/21 Cedric ROUVRAIS <cedric.rouvrais at sgcib.com>:
>> Hi all,
>> I am seriously considering implementing NT auth for bcp and isql in
>> to provide trusted connectivity.
>> Before I start has anyone done NT authen for linux or have good
>> pointers? I
>> really dislike re-inventing hotwater.
>> Thank you very much,
> ?? well... it's already implemented... or perhaps we don't follow
> same line...
> What do you mean by "NT auth" ??
Authentication and trusted connectivity are two different things. A
trusted connection implies using the results of a prior authentication
in order to avoid re-authenticating. A Windows client does this by
passing along a Kerberos ticket that it stores after your initial
logging in to the domain.
It's not clear to me how this would work on a non-Windows system.
Even if you are using Active Directory for external authentication to
log in to your system (and I don't think that's all that common in the
Linux world) you're possibly using LDAP not Kerberos.
So you would still have an authentication step and need to store that
Kerberos ticket and then present it to SQL Server. There's probably
code in Samba that does something like that. Probably Mozilla also.
It may be that most Linux systems already have a Kerberos client and
you'd just need to follow its documentation for fetching the ticket.
Craig A. Berry
mailto:craigberry at mac.com
"... getting out of a sonnet is much more
difficult than getting in."
More information about the FreeTDS