December 8, 2004 at 12:42 pm
Hello,
I am trying run a query to select data from another database server while query analyzer is logged in with windows authentication to another server. (ex. select * from servername.database.dbo.table) I get the following error
Server: Msg 18456, Level 14, State 1, Line 1
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
In the past it worked with a sql login, but it doesn't seem to like the windows authenticated user now even though they seem to have sufficient rights. Is there an easy security setting I have overlooked? thanks
December 8, 2004 at 12:55 pm
I do remember of running into this a while back.SQL does not like Linked servers when you connect using windows authentication. We ended up using SQL Accounts. I don't remember if it was at all related to kerberos but I will update you if i find any KB article or any more info on this.
December 8, 2004 at 2:12 pm
To use Windows NT domain accounts (mapped to themselves) with linked servers you have to configure security account delegation. Your server has to be Windows 2000 (or 2003) in domain with Active Directory with Kerberos support enabled. For configuration you will use setspn utility. Configuration is a bit complicated.
Here is some usefull links:
http://www.sql-server-performance.com/tb_kerberos_protocol_transition.asp
http://www.microsoft.com/resources/documentation/sql/2000/all/reskit/en-us/part3/c1061.mspx
http://support.microsoft.com/default.aspx?scid=kb;en-us;325894
Another way is to link you NT domain account to SQL account on linked server. Be sure this SQL account has the same permissions as NT account.
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply