freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Re: [freetds] what now, Kerberos?

From: "Peter C. Norton" <spacey-freetds.org AT ssr.com>
To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
Subject: Re: [freetds] what now, Kerberos?
Date: Wed, 17 Nov 2010 12:17:38 -0500

On Wed, Nov 17, 2010 at 10:54:39AM -0500, jklowden AT schemamania.org wrote:
> gssapi.c:172:kerberos name MSSQLSvc/mpquant.eg.com:2500

Make sure that there's a principal attached to your MSSQL Server
service account (usually sqlexec, I think) on that server that is of
the form: MSSQLSvc/mpquant.eg.com:2500. Your AD admin should be able
to do this. Make sure you've kinit'd and have a tgt (klist will show
you this). If the gss negotiation succeeded, then you will see the
service principal for this service show up in klist. If it doesnt, it
won't.

-Peter

[freetds] what now, Kerberos?, jklowden, 11/17/2010
- Re: [freetds] what now, Kerberos?, Peter C. Norton, 11/17/2010
  - [freetds] bcp problem, Panos Stavroulis, 11/18/2010