Skip to Content.
Sympa Menu

freetds - Re: [freetds] NT authen from linux

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: "Craig A. Berry" <craigberry AT mac.com>
  • To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] NT authen from linux
  • Date: Wed, 23 Jun 2010 07:27:27 -0500


On Jun 21, 2010, at 8:01 AM, Frediano Ziglio wrote:

2010/6/21 Cedric ROUVRAIS <cedric.rouvrais AT sgcib.com>:

Hi all,

I am seriously considering implementing NT auth for bcp and isql in order
to provide trusted connectivity.

Before I start has anyone done NT authen for linux or have good pointers? I
really dislike re-inventing hotwater.

Thank you very much,

Cedric

?? well... it's already implemented... or perhaps we don't follow same line...
What do you mean by "NT auth" ??


Authentication and trusted connectivity are two different things. A trusted connection implies using the results of a prior authentication in order to avoid re-authenticating. A Windows client does this by passing along a Kerberos ticket that it stores after your initial logging in to the domain.

It's not clear to me how this would work on a non-Windows system. Even if you are using Active Directory for external authentication to log in to your system (and I don't think that's all that common in the Linux world) you're possibly using LDAP not Kerberos.

So you would still have an authentication step and need to store that Kerberos ticket and then present it to SQL Server. There's probably code in Samba that does something like that. Probably Mozilla also. It may be that most Linux systems already have a Kerberos client and you'd just need to follow its documentation for fetching the ticket.

________________________________________
Craig A. Berry
mailto:craigberry AT mac.com

"... getting out of a sonnet is much more
difficult than getting in."
Brad Leithauser





Archive powered by MHonArc 2.6.24.

Top of Page