Skip to Content.
Sympa Menu

freetds - Re: [freetds] NTLMv2 support for domain logins using freetds

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: "Alek Fehretdinov" <alek.fehretdinov AT gmail.com>
  • To: "FreeTDS Development Group" <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] NTLMv2 support for domain logins using freetds
  • Date: Thu, 24 Jul 2008 21:36:36 -0400

Freddy,

Thanks a lot for quick response. I was working all day today upgrading to
FreeTDS 0.82 (I had 0.63 before) and reinstalled DBD::Sybase
Unfortunately I am getting the same error message even after this updrade si
looks like I am missing something here, Hope you can point me on this.
Please take a look at details below:

1. All Windows servers in our network configured with: "Send ntlm v2
response only"
2. Platforms and settings

Was FreeTDS 0.63 On Solaris 10 (SunOS 5.10) before today but I have
recompiled now with FreeTDS 0.82 (and re-installed DBD:Sybase

echo $SYBASE
/usr/local/freetds

freetds.conf:
======================================

tds version = 8.0

dump file = /tmp/freetds.log
debug flags = 0xffff

timeout = 10
connect timeout = 10

text size = 64512

[NYCITASD0060]
host = NYCITASD0060.us.db.com <http://nycitasd0060.us.db.com/>
port = 1433

========================================

3. I can successfully login using database level authentication (database
level user ID):

$ /usr/local/freetds/bin/tsql -SNYCITASD0060 -Udb_tools -P<...pwd...>
locale is
"/en_US.ISO8859-1/en_US.ISO8859-1/C/en_US.ISO8859-1/en_US.ISO8859-1/C"
locale charset is "ISO8859-1"
1> select @@servername
2> go

NYCITASD0060
(1 row affected)

4. Now I tried to connect as user 'FIAKHAL' which belongs to domain 'DBG'

/usr/local/freetds/bin/tsql -SNYCITASD0060 -U'DBG\FIAKHAL' <domain
password>' -I./interf.conf
locale is
"/en_US.ISO8859-1/en_US.ISO8859-1/C/en_US.ISO8859-1/en_US.ISO8859-1/C"
locale charset is "ISO8859-1"
Msg 18452, Level 14, State 1, Server , Line 0
Login failed for user '(null)'. Reason: Not associated with a trusted SQL
Server connection.
Msg 20002, Level 9, State -1, Server OpenClient, Line -1
Adaptive Server connection failed
There was a problem connecting to the server

$ cat dumpconfig.log
===================================================
log.c:190:Starting log file for FreeTDS 0.82
on 2008-07-24 17:20:40 with debug flags 0x4fff.
config.c:172:Getting connection information for [NYCITASD0060].
config.c:181:Attempting to read conf files.
config.c:253:Found conf file './interf.conf' set programmatically.
config.c:398:Looking for section global.
config.c:455: Found section nycitasd0060.
config.c:469: Reached EOF
config.c:398:Looking for section NYCITASD0060.
config.c:455: Found section nycitasd0060.
config.c:458:Got a match.
config.c:479: host = 'NYCITASD0060.us.db.com<http://nycitasd0060.us.db.com/>
'
config.c:508:Found host entry
NYCITASD0060.us.db.com<http://nycitasd0060.us.db.com/>
.
config.c:512:IP addr is 10.152.37.113.
config.c:479: port = '1433'
config.c:469: Reached EOF
config.c:257:Success: [NYCITASD0060] defined in ./interf.conf.
config.c:558:tds_config_login: client_charset is ISO8859-1.
config.c:195:Final connection parameters:
config.c:196: server_name = NYCITASD0060
config.c:197: port = 1433
config.c:198: major_version = 8
config.c:199: minor_version = 0
config.c:200: block_size = 0
config.c:201: language = us_english
config.c:202: server_charset =
config.c:203: connect_timeout = 0
config.c:204: client_host_name = nygmwsp011.us.db.com
config.c:205: app_name = TSQL
config.c:206: user_name = DBG\FIAKHAL
config.c:209: library = TDS-Library
config.c:210: bulk_copy = 0
config.c:211: suppress_language = 0
config.c:212: encrypt level = 0
config.c:213: query_timeout = 0
config.c:216: client_charset = ISO8859-1
config.c:217: ip_addr = 10.152.37.113
config.c:218: instance_name =
config.c:219: database =
config.c:220: dump_file =
config.c:221: debug_flags = 0
config.c:222: text_size = 0
config.c:223: broken_dates = 0
config.c:224: broken_money = 0
config.c:225: emul_little_endian = 0
===================================================

Please help...!
Regards,
=Alek

On 7/24/08, ZIGLIO, Frediano, VF-IT <Frediano.Ziglio AT vodafone.com> wrote:
>
> >
> > Dear freetds,
> >
> > My question is if NTLMv2 support is planned to be implemented
> > any time soon
> > in the next releases of FreeTDS. I think this is probably the one most
> > important feature that needs to be moved up in your priority
> > to-do list. I
> > was excited to see the working connections to MSSQL servers
> > from my test
> > Unix client scripts but in big firms (I work at one of them)
> > the security
> > standards will not allow to use FreeTDS facility unless it
> > supports NTLMv2
> > which is a standard security setup on most of the NT boxes in
> > such firms.
> >
>
> NTLM2 and Kerberos are implemented so you should have no problem at all.
> Which FreeTDS version are you using? Which environment setting?
>
> > I tried to google this but the results are somewhat mixed: it
> > looks like
> > this is something that is under the consideration but it's
> > still not clear
> > if I can hope to see this implemented any time soon.
> >
> > Will really appreciate any info on this.
> >
> > Regards,
> > Alek Fehretdinov
> > Deutsche Bank, New York
>
> bye
> freddy77
>
> _______________________________________________
> FreeTDS mailing list
> FreeTDS AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/freetds
>
>
>




Archive powered by MHonArc 2.6.24.

Top of Page