[freetds] Windows authentication on Windows
freddy77 at gmail.com
Mon Feb 1 05:36:29 EST 2010
2010/1/30 James K. Lowden <jklowden at freetds.org>:
> Frediano Ziglio wrote:
>> > Did I mention how excellent this is? Â The FreeTDS community owes you
>> > a big smooch.
>> Sometimes is strange how a thing that is easy for a person could be so
> "It's easy if you know how."
>> Well... some updates and some reminds. I think sspi code could be
>> considered completed:
> Agreed. Needs only documentation. (I'm working on it.)
>> As a reminds Kerberos support works since 2007 with empty username and
> Can username/password be NULL?
Well... empty not NULL... but for user_name is quite the same... I
don't think any system have a "" username!
> The word "Kerberos" does not appear in the UG. That's because I have no
> direct experience with it and no one who understands it has documented it.
I updated docuementation a bit. Usually the base requirement is to
configure a /etc/krb5.conf file and initialize a ticket with kinit.
> I myself would like to use Kerberos for FreeTDS on RHEL. Any advice on
> what to tell my Linux admin and my MSSQL admin, to make sure FreeTDS will
> be able to connect?
Well... if TCP/IP is open you should refer to your domain admin (if
your server is in a AD domain... obviously).
>> Perhaps we could remove username/password from tsql or other
>> tools but perhaps is better to add an explicit option
> I don't understand why "isql.exe -E" and "bcp.exe -T" exist. ISTM if the
> user doesn't provide -U and -P then the library should attempt a domain
> login for $LOGNAME.
It's just a suggestion. Is only that I don't want to see many people
that just pass a server name and expect everything working
magically.... using additional option should help prevent this...
similar effect is possible using explicit empty user and password.
Oh... I noted you committed a patch for getopt support under systems
which don't have getopt however getopt.c is currently under a BSD
license which is not LGPL compatible leading to licenses problems (for
instance tsql using such file should output some additional comments
aboud BSD code). I suggest to use gengetopt getopt.c files (which are
More information about the FreeTDS