Skip to Content.
Sympa Menu

freetds - Re: [freetds] NTLMv2 support for domain logins using freetds

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: "ZIGLIO, Frediano, VF-IT" <Frediano.Ziglio AT vodafone.com>
  • To: "FreeTDS Development Group" <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] NTLMv2 support for domain logins using freetds
  • Date: Fri, 25 Jul 2008 11:41:35 +0200

>
> Freddy,
>
> Thanks a lot for quick response. I was working all day today
> upgrading to
> FreeTDS 0.82 (I had 0.63 before) and reinstalled DBD::Sybase
> Unfortunately I am getting the same error message even after
> this updrade si
> looks like I am missing something here, Hope you can point me on this.
> Please take a look at details below:
>
> 1. All Windows servers in our network configured with: "Send ntlm v2
> response only"
> 2. Platforms and settings
>
> Was FreeTDS 0.63 On Solaris 10 (SunOS 5.10) before today but I have
> recompiled now with FreeTDS 0.82 (and re-installed DBD:Sybase
>
> echo $SYBASE
> /usr/local/freetds
>
> freetds.conf:
> ======================================
>
> tds version = 8.0
>
> dump file = /tmp/freetds.log
> debug flags = 0xffff
>
> timeout = 10
> connect timeout = 10
>
> text size = 64512
>
> [NYCITASD0060]
> host = NYCITASD0060.us.db.com <http://nycitasd0060.us.db.com/>
> port = 1433
>
> ========================================
>
> 3. I can successfully login using database level
> authentication (database
> level user ID):
>
> $ /usr/local/freetds/bin/tsql -SNYCITASD0060 -Udb_tools
> -P<...pwd...>
> locale is
> "/en_US.ISO8859-1/en_US.ISO8859-1/C/en_US.ISO8859-1/en_US.ISO8859-1/C"
> locale charset is "ISO8859-1"
> 1> select @@servername
> 2> go
>
> NYCITASD0060
> (1 row affected)
>
> 4. Now I tried to connect as user 'FIAKHAL' which belongs to
> domain 'DBG'
>
> /usr/local/freetds/bin/tsql -SNYCITASD0060 -U'DBG\FIAKHAL' <domain
> password>' -I./interf.conf
> locale is
> "/en_US.ISO8859-1/en_US.ISO8859-1/C/en_US.ISO8859-1/en_US.ISO8859-1/C"
> locale charset is "ISO8859-1"
> Msg 18452, Level 14, State 1, Server , Line 0
> Login failed for user '(null)'. Reason: Not associated with a
> trusted SQL
> Server connection.
> Msg 20002, Level 9, State -1, Server OpenClient, Line -1
> Adaptive Server connection failed
> There was a problem connecting to the server
>
> $ cat dumpconfig.log
> ===================================================
> log.c:190:Starting log file for FreeTDS 0.82
> on 2008-07-24 17:20:40 with debug flags 0x4fff.
> config.c:172:Getting connection information for [NYCITASD0060].
> config.c:181:Attempting to read conf files.
> config.c:253:Found conf file './interf.conf' set programmatically.
> config.c:398:Looking for section global.
> config.c:455: Found section nycitasd0060.
> config.c:469: Reached EOF
> config.c:398:Looking for section NYCITASD0060.
> config.c:455: Found section nycitasd0060.
> config.c:458:Got a match.
> config.c:479: host =
> 'NYCITASD0060.us.db.com<http://nycitasd0060.us.db.com/>
> '
> config.c:508:Found host entry
> NYCITASD0060.us.db.com<http://nycitasd0060.us.db.com/>
> .
> config.c:512:IP addr is 10.152.37.113.
> config.c:479: port = '1433'
> config.c:469: Reached EOF
> config.c:257:Success: [NYCITASD0060] defined in ./interf.conf.
> config.c:558:tds_config_login: client_charset is ISO8859-1.
> config.c:195:Final connection parameters:
> config.c:196: server_name = NYCITASD0060
> config.c:197: port = 1433
> config.c:198: major_version = 8
> config.c:199: minor_version = 0
> config.c:200: block_size = 0
> config.c:201: language = us_english
> config.c:202: server_charset =
> config.c:203: connect_timeout = 0
> config.c:204: client_host_name = nygmwsp011.us.db.com
> config.c:205: app_name = TSQL
> config.c:206: user_name = DBG\FIAKHAL
> config.c:209: library = TDS-Library
> config.c:210: bulk_copy = 0
> config.c:211: suppress_language = 0
> config.c:212: encrypt level = 0
> config.c:213: query_timeout = 0
> config.c:216: client_charset = ISO8859-1
> config.c:217: ip_addr = 10.152.37.113
> config.c:218: instance_name =
> config.c:219: database =
> config.c:220: dump_file =
> config.c:221: debug_flags = 0
> config.c:222: text_size = 0
> config.c:223: broken_dates = 0
> config.c:224: broken_money = 0
> config.c:225: emul_little_endian = 0
> ===================================================
>
> Please help...!
> Regards,
> =Alek
>

Mmm... could you please send me a network trace of unsuccessful login? Login
packets are
disabled in libTDS code. I usually use tcpdump or wireshark. The syntax
should be

tcpdump -i interface -s 2000 -w out.dat port 1433

(at least under Linux it works).

Use a test account or is better to send it to me privately. Keep in mind that
this packet
contains username, domains, machine name and encrypted password.

freddy77

Attachment: smime.p7s
Description: S/MIME cryptographic signature




Archive powered by MHonArc 2.6.24.

Top of Page