freetds AT lists.ibiblio.org
Subject: FreeTDS Development Group
List archive
- From: Igor Korot <ikorot01 AT gmail.com>
- To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
- Subject: Re: [freetds] tsql with SSL on SQL Server
- Date: Thu, 7 Apr 2011 12:00:20 -0700
Tony,
It would be interesting to see the log dump....
Like Frdiano said, it should work.
Thank you.
On Thu, Apr 7, 2011 at 11:47 AM, Tony Baldarelli
<tbaldarelli AT wmsvision.com> wrote:
> SQL Server 2005 and above. Actually, I think we currently only use 2005.
> And that is definitely what I am trying right this very second.
>
> Also, SQL Server is currently configured to force encryption.
>
> The ODBC driver that my application uses ( Easysoft ) works fine from my
> application, and isql works fine. So I know I can connect to the SQL Server
> database from this linux machine. I just cannot using tsql.
>
>
> Tony
>
>
> -----Original Message-----
> From: freetds-bounces AT lists.ibiblio.org
> [mailto:freetds-bounces AT lists.ibiblio.org] On Behalf Of Igor Korot
> Sent: Thursday, April 07, 2011 2:22 PM
> To: FreeTDS Development Group
> Subject: Re: [freetds] tsql with SSL on SQL Server
>
> Hi, Tony,
>
> On Thu, Apr 7, 2011 at 8:31 AM, Tony Baldarelli
> <tbaldarelli AT wmsvision.com> wrote:
>> Ok, it did not work. I will look up the encryption settings for this
> version and see if maybe something else will work, but I would love some
> feedback as to if I am missing something.
>>
>> See below:
>> • End of /usr/local/etc/freetds.conf
>> [MyServer2005]
>> host = 192.168.254.91
>> port = 1433
>> tds version = 8.0
>> encryption = request
>>
>> # A typical Microsoft SQL Server 6.x configuration
>> ;[MyServer65]
>> ; host = ntmachine.domain.com
>> ; port = 1433
>> ; tds version = 4.2
>> • Failed command ( password removed for security )
>> [tonyb:v9_odbc:V3_18]> tsql -S myserver2005 -U nortel -P PASSWORD
>> locale is "en_US"
>> locale charset is "ISO-8859-1"
>> Msg 20017, Level 9, State -1, Server OpenClient, Line -1
>> Unexpected EOF from the server
>> Msg 20002, Level 9, State -1, Server OpenClient, Line -1
>> Adaptive Server connection failed
>> There was a problem connecting to the server
>> • Version
>> [tonyb:v9_odbc:V3_18]> tsql -C
>> Compile-time settings (established with the "configure" script)
>> Version: freetds v0.82.1.dev.20110306
>> freetds.conf directory: /usr/local/etc
>> MS db-lib source compatibility: no
>> Sybase binary compatibility: no
>> Thread safety: yes
>> iconv library: yes
>> TDS version: 5.0
>> iODBC: no
>> unixodbc: yes
>> • Date stamp of tsql command
>> [tonyb:v9_odbc:V3_18]> ls -lt /usr/local/bin/tsql
>> -rwxr-xr-x 1 root root 1487662 Apr 7 11:22
> /usr/local/bin/tsql
>> [tonyb:v9_odbc:V3_18]>
>
> Are you trying to connect to the Sybase server or MS SQL server? If
> the latter what version - 2005 or some other?
>
> Thank you.
>
>>
>>
>> Tony
>>
>>
>> -----Original Message-----
>> From: freetds-bounces AT lists.ibiblio.org
> [mailto:freetds-bounces AT lists.ibiblio.org] On Behalf Of Tony Baldarelli
>> Sent: Thursday, April 07, 2011 11:06 AM
>> To: 'FreeTDS Development Group'
>> Subject: Re: [freetds] tsql with SSL on SQL Server
>>
>> Thanks. Is the feature you disabled in the patch important? More
> precisely, what kind of feature is it? Always sort of makes me nervous when
> I hear people disabled a feature, so that is why I ask. I will definitely
> be trying this patch, so thanks for that idea.
>>
>>
>> You might not be able to answer this, but what are the merits to using
> openssl or gnutls with freetds?
>>
>> Tony
>>
>>
>> -----Original Message-----
>> From: freetds-bounces AT lists.ibiblio.org
> [mailto:freetds-bounces AT lists.ibiblio.org] On Behalf Of Frediano Ziglio
>> Sent: Thursday, April 07, 2011 5:07 AM
>> To: FreeTDS Development Group
>> Subject: Re: [freetds] tsql with SSL on SQL Server
>>
>> 2011/4/7 Tony Baldarelli <tbaldarelli AT wmsvision.com>:
>>> Hello,
>>> We are moving to using SSL to connect to our SQL Server databases.
>>> Currently I cannot get it to work and was wondering if there was some
>>> documentation out there on it. So far the documentation I have read does
>>> not work. For instance, it tells me to set "encryption" in the
> freetds.conf
>>> to either "request" or "required", which I have tried.
>>>
>>> I currently use openssl, but I do see references to it working
> with
>>> gnutls, so I might look that up as well.
>>>
>>>
>>> Tony Baldarelli
>>>
>>>
>>> P.S. For those who are curious, here is some data to consider.
>>>
>>>
>>> • Machine 1 tsql ( no osql )
>>> o Version:
>>> [tonyb:v9_odbc:V3_18]> tsql -C
>>> Compile-time settings (established with the "configure"
>>> script):
>>> Version: freetds v0.63
>>> MS db-lib source compatibility: no
>>> Sybase binary compatibility: unknown
>>> Thread safety: yes
>>> iconv library: yes
>>> TDS version: 4.2
>>> iODBC: no
>>> unixodbc: yes
>>> [tonyb:v9_odbc:V3_18]>
>>> o Error:
>>> [tonyb:v9_odbc:V3_18]> tsql -S myserver2005 -U <user
>>> removed for security> -P <password removed for security>
>>> locale is "en_US"
>>> locale charset is "ISO-8859-1"
>>> Msg 20004, Level 9, State 0, Server OpenClient, Line 0
>>> Read from SQL server failed.
>>> Msg 20014, Level 9, State 0, Server OpenClient, Line 0
>>> Login incorrect.
>>> There was a problem connecting to the server
>>> [tonyb:v9_odbc:V3_18]>
>>> o freetds section for machine 1. Note that "encryption"
> does
>>> not work with this version, so that is why it is commented out.
>>> [MyServer2005]
>>> host = 192.168.254.91
>>> port = 1433
>>> tds version = 8.0
>>> ##encryption = request
>>> • Machine 2 tsql, new version
>>> o Version:
>>> [tonyb:v9_odbc:V3_18]> tsql -C
>>> Compile-time settings (established with the "configure"
>>> script)
>>> Version: freetds v0.82
>>> freetds.conf directory: /usr/local/etc
>>> MS db-lib source compatibility: no
>>> Sybase binary compatibility: no
>>> Thread safety: yes
>>> iconv library: yes
>>> TDS version: 5.0
>>> iODBC: no
>>> unixodbc: yes
>>> [tonyb:v9_odbc:V3_18]>
>>> o Test:
>>> [tonyb:v9_odbc:V3_18]> tsql -S myserver2005 -U <user
>>> removed for security> -P <password removed for security>
>>> locale is "en_US"
>>> locale charset is "ISO-8859-1"
>>> Msg 20017, Level 9, State -1, Server OpenClient, Line -1
>>> Unexpected EOF from the server
>>> Msg 20002, Level 9, State -1, Server OpenClient, Line -1
>>> Adaptive Server connection failed
>>> There was a problem connecting to the server
>>> [tonyb:v9_odbc:V3_18]>
>>> • Machine 2 tsql, old version
>>> o Version:
>>> [tonyb:v9_odbc:V3_18]> tsql.old -C
>>> Compile-time settings (established with the "configure"
>>> script):
>>> Version: freetds v0.64.dev.20051213
>>> MS db-lib source compatibility: no
>>> Sybase binary compatibility: unknown
>>> Thread safety: yes
>>> iconv library: yes
>>> TDS version: 5.0
>>> iODBC: no
>>> unixodbc: yes
>>> [tonyb:v9_odbc:V3_18]>
>>> o Test:
>>> [tonyb:v9_odbc:V3_18]> tsql.old -S myserver2005 --U
> <user
>>> removed for security> -P <password removed for security>
>>> locale is "en_US"
>>> locale charset is "ISO-8859-1"
>>> Msg 20004, Level 9, State 0, Server OpenClient, Line 0
>>> Read from SQL server failed.
>>> Msg 20014, Level 9, State 0, Server OpenClient, Line 0
>>> Login incorrect.
>>> There was a problem connecting to the server
>>> [tonyb:v9_odbc:V3_18]>
>>> • Machine 2 osql
>>> o It is supposed to go into isql when it is done, but it
> does
>>> not.
>>> o Output:
>>> [tonyb:v9_odbc:V3_18]> osql -S wv8 -U nortel -P <password
>>> removed for security>
>>> looking for odbc.ini and odbcinst.ini in /usr/local/etc
>>> reading "/home/tonyb/.odbc.ini"
>>> [wv8] not found in "/home/tonyb/.odbc.ini"
>>> reading "/usr/local/etc/odbc.ini"
>>> [wv8] found in "/usr/local/etc/odbc.ini"
>>> found this section:
>>> [wv8]
>>> Driver = Easysoft ODBC-SQL Server SSL
>>> Description = Easysoft SQL Server ODBC driver
>>> Server = 192.168.254.91
>>> Port = 1433
>>> Database = wv8_162
>>> User = nortel
>>> Password = <password removed for security>
>>> Mars_Connection = No
>>> Logging = Process
>>> LogFile =
>>> /home/wms/v9_odbc/oracle/8.1.7/LOG/wv8_162.easysoft.ssl2
>>> QuotedId = Yes
>>> AnsiNPW = Yes
>>> Language =
>>> Version7 = No
>>> ClientLB = No
>>> Encrypt = No
>>> TrustServerCertificate = No
>>> PrivateKeyFile =
>>> CertificateFile =
>>> Entropy =
>>> Failover_Partner =
>>> VarMaxAsLong = No
>>>
>>> looking for driver for DSN [wv8]
>>> driver "Easysoft" found for [wv8] in odbc.ini
>>> found driver named "Easysoft"
>>> Easysoft is not a readable file
>>> looking for entry named [Easysoft] in
>>> /usr/local/etc/odbcinst.ini
>>> no driver mentioned for [Easysoft] in odbcinst.ini
>>> [tonyb:v9_odbc:V3_18]>
>>> • Machine 2 freetds setup ( uncommenting "encryption" does not
> really
>>> change anything, it still fails with the same errors above )
>>> [MyServer2005]
>>> host = 192.168.254.91
>>> port = 1433
>>> tds version = 8.0
>>> #encryption = request
>>>
>>
>> At least use version 0.82, patched is better. Obviously we cannot
>> support easysoft driver :)
>> There is a known issue with early 0.82 and OpenSSL due to a security
>> improvement in OpenSSL that is not compatible with MS software. A fix
>> (we disable such a feature) has been incorporated in post 0.82
>> versions (that is patched version, available at
>> http://ibiblio.org/pub/Linux/ALPHA/freetds/stable/ or
>> freetds.sourceforce.net). Also recent versions support much better
>> encryption settings.
>>
>> freddy77
>> _______________________________________________
>> FreeTDS mailing list
>> FreeTDS AT lists.ibiblio.org
>> http://lists.ibiblio.org/mailman/listinfo/freetds
>>
>> _______________________________________________
>> FreeTDS mailing list
>> FreeTDS AT lists.ibiblio.org
>> http://lists.ibiblio.org/mailman/listinfo/freetds
>>
>> _______________________________________________
>> FreeTDS mailing list
>> FreeTDS AT lists.ibiblio.org
>> http://lists.ibiblio.org/mailman/listinfo/freetds
>>
> _______________________________________________
> FreeTDS mailing list
> FreeTDS AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/freetds
>
> _______________________________________________
> FreeTDS mailing list
> FreeTDS AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/freetds
>
-
[freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/06/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Frediano Ziglio, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Igor Korot, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Igor Korot, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Tony Baldarelli, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Igor Korot, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Tony Baldarelli, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Igor Korot, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Tony Baldarelli, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Igor Korot, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Igor Korot, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Frediano Ziglio, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Igor Korot, 04/08/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Frediano Ziglio, 04/08/2011
- Re: [freetds] tsql with SSL on SQL Server, Frediano Ziglio, 04/08/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Frediano Ziglio, 04/08/2011
Archive powered by MHonArc 2.6.24.