Skip to Content.
Sympa Menu

freetds - Re: [freetds] Integrated Windows Authentication

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: "Korosi, Nick" <nkorosi AT indians.com>
  • To: "freetds AT lists.ibiblio.org" <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] Integrated Windows Authentication
  • Date: Wed, 23 Mar 2011 20:47:10 +0000

Thanks for the information. I do have all of these bases covered, however I
found this today:
http://comments.gmane.org/gmane.comp.db.tds.freetds/13287

The version I have is the "official patched 0.82 version" from
http://freetds.sourceforge.net/. I've also tried applying the "post 8.82
patch" and seem to have something wrong with the syntax... I am a novice in
this area. I did edit the tds_dstr_copy(&connection->server_name, tmp)
function call manually in connectparams.c and still am not having any luck.

I assume that after initializing kinit, I can simply run "tsql -S <SERVER>"
and authentication would be automatic, correct? When doing this tsql is
still telling me that I'm missing the -U argument.

Thanks,
Nick




-----Original Message-----
From: freetds-bounces AT lists.ibiblio.org
[mailto:freetds-bounces AT lists.ibiblio.org] On Behalf Of James K. Lowden
Sent: Monday, March 21, 2011 9:30 PM
To: freetds AT lists.ibiblio.org
Subject: Re: [freetds] Integrated Windows Authentication

On Mon, 21 Mar 2011 23:12:34 +0000
"Korosi, Nick" <nkorosi AT indians.com> wrote:

> I was wondering if it's possible pass the current users credentials to
> Microsoft SQL Server using integrated authentication so that the user
> doesn't have to type in their password in clear text. I have Samba/Winbind
> installed and the Linux server is a member of the domain. The user is
> logging into the shell with their domain username and password as well.

http://freetds.schemamania.org/91/userguide/kerberos.htm
http://freetds.schemamania.org/91/userguide/config.htm#EVERYONE

Yes. All you need is Kerberos:

1. Kerberos has use Active Directory
2. kinit(1) and sclient(1) should work
3. FreeTDS is configured with --enable-krb5 4. you've linked in the
Kerberos libraries

then it should Just Work. The utilities in the current snapshot don't even
require -U and -P; they attempt a Kerberos/SSPI login if no username is
provided.

--jkl
_______________________________________________
FreeTDS mailing list
FreeTDS AT lists.ibiblio.org
http://lists.ibiblio.org/mailman/listinfo/freetds






Archive powered by MHonArc 2.6.24.

Top of Page