FreeTDS Development Group

["Tille, Andreas" <TilleA AT rki.de>]

Hi,
I'm accessing an MSSQL server successfully since a long time.  Now this 
server was configured to encrypted connections and I get:

$ sqsh -w 256 -h -S server -U domain\\user -D database
sqsh-2.5.16.1 Copyright (C) 1995-2001 Scott C. Gray
Portions Copyright (C) 2004-2014 Michael Peppler and Martin Wesdorp
This is free software with ABSOLUTELY NO WARRANTY
For more information type '\warranty'
Msg 18452, Level 14, State 1 
Server ' server', Line 1
Login failed. The login is from an untrusted domain and cannot be used with 
Integrated authentication.
Open Client Message
Layer 0, Origin 0, Severity 78, Number 34
Adaptive Server connection failed


I'm using a backport of the latest Debian packages of sqsh and freetds in 
unstable on a Debian stretch system.  This is the change I did in 
/etc/freetds:

diff --git a/freetds/freetds.conf b/freetds/freetds.conf
index 1f5f633..f38864b 100644
--- a/freetds/freetds.conf
+++ b/freetds/freetds.conf
@@ -13,6 +13,7 @@
 ;      tds version = 4.2
        tds version = 8.0
        client charset = UTF-8
+       encryption = require
 
        # Whether to write a TDSDUMP file for diagnostic purposes
        # (setting this to /tmp is insecure on a multi-user system)


I did no other changes to the configuration of freetds.  Is there any 
description what to do to successfully access a MSSQL server that is 
configured to enforce encryption?  I've found some hints to ssltunnel but I 
doubt that this should be a proper solution.

Any hint would be welcome, Andreas.