Linked server with Windows authentication

• kirbles

  SSC-Addicted

  Points: 464

  More actions

  January 19, 2005 at 6:16 am

  #85349

  I'm trying to setup a linked server in an environment where Windows authentication is required on both servers. Both servers are in the same domain. Active Directory is not available.

  Is this possible?

• Steve Jones - SSC Editor

  SSC Guru

  Points: 736478

  More actions

  January 19, 2005 at 8:09 am

  #538084

  I think if they both have the same name/password it should work. You might need the same local account on each server.

• magasvs

  SSCertifiable

  Points: 7660

  More actions

  January 19, 2005 at 12:25 pm

  #538158

  To use Windows authentication with linked servers you have to configure security account delegation. Your server has to be Windows 2000 (or 2003) in domain with Active Directory with Kerberos support enabled. For configuration you will use setspn utility. Configuration is a bit complicated.

  Here are some usefull links:

  http://www.sql-server-performance.com/tb_kerberos_protocol_transition.asp

  http://www.microsoft.com/resources/documentation/sql/2000/all/reskit/en-us/part3/c1061.mspx

  http://support.microsoft.com/default.aspx?scid=kb;en-us;325894

  Not sure it will work without Active Directory as soon as Kerberos required. May be there is a way to set up Kerberos without Active Directory, but I didn't hear about it.

• Kev Pickering

  SSC Enthusiast

  Points: 129

  More actions

  January 20, 2005 at 2:35 am

  #538255

  Here we have the same environment.

  Check out BOL for

  1. sp_addlinkedserver - You need to firstly set up the linked server

  then

  2. sp_addlinkedsrvlogin - set up a mapping between the local account and an account on the linked server.

  Needless to say you need to be in mixed mode authentication (SQL and Windows) on the remote server.