Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Linked Server Error: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Expand / Collapse
Author
Message
Posted Wednesday, November 16, 2011 9:47 AM
SSC Eights!

SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!

Group: General Forum Members
Last Login: Wednesday, December 10, 2014 4:05 AM
Points: 907, Visits: 1,903
I am setting up a linked server between two servers on my domain.
I am using impersonate, so that its my own account that is used on the linked server.

I set up both servers to use kerberos and confirmed its working (both servers running under domain accounts).
im logged into my desktop pc, via my domain account.

Now, when i try to query tables via the linked server i get the error:


Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

I set up kerberos initially to get over this yet its still an issue. anyone able to help here?

Thanks.
Post #1206923
Posted Wednesday, November 16, 2011 10:02 AM


SSCommitted

SSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommitted

Group: General Forum Members
Last Login: Tuesday, August 19, 2014 6:53 PM
Points: 1,932, Visits: 1,589
It was a BUG in SS2K5 and MS claims it to be fixed. Time to re-open the defect I guess

http://support.microsoft.com/kb/925001


Dev

Devendra Shirbad | BIG Data Architect / DBA | Ex-Microsoft CSS (SQL 3T)
*** Open Network for Database Professionals ***

LinkedIn: http://www.linkedin.com/in/devendrashirbad
Post #1206941
Posted Wednesday, November 16, 2011 1:31 PM
SSC Eights!

SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!

Group: General Forum Members
Last Login: Wednesday, December 10, 2014 4:05 AM
Points: 907, Visits: 1,903
Would a bug of this scale ( its pretty big IMO that you cannot use linked servers with Windows Logins over Kerberos) go unfixed since sql server2000? Im using sql server 2008 R2 enterprise.
Post #1207094
Posted Wednesday, November 16, 2011 1:48 PM


Keeper of the Duck

Keeper of the Duck

Group: Moderators
Last Login: Friday, November 14, 2014 7:14 AM
Points: 6,625, Visits: 1,876
Kerberos authentication was likely set up. Was Kerberos delegation configured? This is required to go through the linked server connection to another SQL Server using the passed Windows credentials. If not, this whitepaper discusses how to do so for the linked server scenario.

How to Implement Kerberos Constrained Delegation with SQL Server 2008


K. Brian Kelley, CISA, MCSE, Security+, MVP - SQL Server
Regular Columnist (Security), SQLServerCentral.com
Author of Introduction to SQL Server: Basic Skills for Any SQL Server User
| Professional Development blog | Technical Blog | LinkedIn | Twitter
Post #1207110
Posted Wednesday, November 16, 2011 2:02 PM
SSC Eights!

SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!SSC Eights!

Group: General Forum Members
Last Login: Wednesday, December 10, 2014 4:05 AM
Points: 907, Visits: 1,903
K. Brian Kelley (11/16/2011)
Kerberos authentication was likely set up. Was Kerberos delegation configured? This is required to go through the linked server connection to another SQL Server using the passed Windows credentials. If not, this whitepaper discusses how to do so for the linked server scenario.

How to Implement Kerberos Constrained Delegation with SQL Server 2008


Sorted! Thanks a Mil Brian! It was all about the delegation! Funny, ive been googling this issue for a few hours and not once did delegation come up as the cause of the issue. most peole just settled for sql authentication and left it at that.

Thanks again Brian!
Post #1207128
Posted Thursday, November 17, 2011 12:34 AM


SSCommitted

SSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommitted

Group: General Forum Members
Last Login: Tuesday, August 19, 2014 6:53 PM
Points: 1,932, Visits: 1,589
winston Smith (11/16/2011)
Would a bug of this scale ( its pretty big IMO that you cannot use linked servers with Windows Logins over Kerberos) go unfixed since sql server2000? Im using sql server 2008 R2 enterprise.


It was a TYPO. SS2K --> SS2K5 (edited below)


Dev

Devendra Shirbad | BIG Data Architect / DBA | Ex-Microsoft CSS (SQL 3T)
*** Open Network for Database Professionals ***

LinkedIn: http://www.linkedin.com/in/devendrashirbad
Post #1207267
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse