FreeTDS Development Group

["Lowden, James K" <LowdenJK AT bernstein.com>]

> From: Hable, Kristofer J. [mailto:hablekj AT mail.slh.wisc.edu]
> Sent: September 25, 2003 1:49 PM
> 
> Hi, I have a Redhat 9.0 server with PHP 4.3.3 + FreeTDS .61 
> 
> Problem: When I try connecting to a MSSQL 2K server using a 
> valid SQL server account I get denied.
> "Reason: Not > associated with a trusted SQL Server connection". 
              ^^^  typo?

>       1. If I use a valid domain account (with the proper 
> privileges) the connection works. 
>       2. My SQL server is set to accept both domain logins 
> and sql server logins. (mixed mode)
>       3. I can connect fine with tsql and any account domain 
> or sql server..
> 
> It seems like my free tds connections from PHP are always domain type
> connections even though I have domain connections explicitly 
> turned off in the freetds conf.

The login logic is unaware of the application, be it tsql or PHP.  There's
no way for an application to affect which login type is used.  Perhaps
they're not using exactly the same freetds.conf entry?  I ask because you
said you can connect with a valid domain login, but "have domain connections
explicitly turned off".  

You might want to try setting the TDSDUMPCONFIG variable before starting
apache.  Then (try to) log in with PHP, save the file, and log in with the
same account with tsql.  If the two files are identical, then your
server-lookup is the same, and tsql should not be able to log you in with
your domain account (for any servername with "try domain login = no").  

> My next thoughts are to try a lower version of freetds..

Better a recent snapshot.  One enhancement in the next release (already
done) is that the try domain/server login entries in freetds.conf are
obsolete.  If the username contains a '\', FreeTDS attempts a domain login,
else it uses a standard server login.  

Prior versions had a dependency on an SSL library that we've since removed.


HTH.  

--jkl

P.S.  Vorlon, Freddy:  Can we remove TDS_STR_TRYDOM etc. from tds.h and
login.c?  
-----------------------------------------
The information contained in this transmission may contain privileged and 
confidential information and is intended only for the use of the person(s) 
named above. If you are not the intended recipient, or an employee or agent 
responsible for delivering this message to the intended recipient, any 
review, dissemination, distribution or duplication of this communication is 
strictly prohibited. If you are not the intended recipient, please contact 
the sender immediately by reply e-mail and destroy all copies of the original 
message. Please note that we do not accept account orders and/or instructions 
by e-mail, and therefore will not be responsible for carrying out such orders 
and/or instructions.