Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase 12»»

Linked server setup issue - Windows Authentication Configured SQl 2000 server to Mixed Authentication Configured SQL 2000 Server Expand / Collapse
Author
Message
Posted Tuesday, May 20, 2008 7:16 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Monday, December 21, 2009 12:14 PM
Points: 5, Visits: 60
Here's hoping someone can help me with my latest configuration issue. I'm trying to get linked servers setup appropriately. The environment I am testing this in has 3 servers in the same domain. Server 1 is configured with Windows authentication and has the startup service account configured to use a system account. Server 2 and 3 are both configured using mixed mode authentication and have the startup service account as a domain account (domain\username). I can setup linked servers between servers 2 and 3 without issue, but cannot connect to server 1 from 2 or from 3. I think my main issue is not knowing the correct way to configure the linked servers going to server 1. I can provide any additional information that would be helpful, but any insight would be appreciated. Also, we are moving to an environment where all of our servers will be switched to windows authentication, so simply switching server 1 to mixed is not an option. Thanks!
Post #503616
Posted Tuesday, May 27, 2008 8:20 PM
UDP Broadcaster

UDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP Broadcaster

Group: General Forum Members
Last Login: Friday, April 05, 2013 4:43 PM
Points: 1,473, Visits: 1,314
Since your three servers are in the same domain, you can use a domain account to link across each other among these three servers. You cannot use an SQL Server account to link Server 1.
Post #507369
Posted Wednesday, May 28, 2008 6:35 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Monday, December 21, 2009 12:14 PM
Points: 5, Visits: 60
SQL ORACLE (5/27/2008)
Since your three servers are in the same domain, you can use a domain account to link across each other among these three servers. You cannot use an SQL Server account to link Server 1.


Thanks for the response! Can you help me further, though? I'm trying to figure out EXACTLY how to set that up using linked servers and what criteria needs to be met for the domain account? For instance, does account delegation need to be enabled for this to occur? And do you know any specifics on how the linked server setup would be configured (via enterprise or SQL code)?
Post #507619
Posted Wednesday, May 28, 2008 2:44 PM
UDP Broadcaster

UDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP Broadcaster

Group: General Forum Members
Last Login: Friday, April 05, 2013 4:43 PM
Points: 1,473, Visits: 1,314
Here is the outline of the setup
1. Create a domain account (You may ask your windows team to create it in the Active Directory);
2. Grant necessary permissions in these three SQL Servers;
3. Use sp_addlinkedserver to build the link between servers.
Post #508037
Posted Thursday, May 29, 2008 6:48 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Monday, December 21, 2009 12:14 PM
Points: 5, Visits: 60
Thanks again! For this specific scenario, is it a requirement to have delegation enabled in active directory?
Post #508349
Posted Thursday, May 29, 2008 9:28 PM
UDP Broadcaster

UDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP BroadcasterUDP Broadcaster

Group: General Forum Members
Last Login: Friday, April 05, 2013 4:43 PM
Points: 1,473, Visits: 1,314
No. SQL Server 2000 does not have the concept of delegation itself.
Post #508792
Posted Monday, November 15, 2010 5:17 AM
SSC Journeyman

SSC JourneymanSSC JourneymanSSC JourneymanSSC JourneymanSSC JourneymanSSC JourneymanSSC JourneymanSSC Journeyman

Group: General Forum Members
Last Login: Yesterday @ 8:39 AM
Points: 98, Visits: 1,059
Hi,

I have read through your questions and answers to your linked server setup issue.

I too am having a similar problem with two servers that i am trying to link together. I have tested a dmain account connection with two sql 2005 servers and it is successful. When i do this with a sql 2005 to sql 2008 it is unsuccessful, however when i have tested from the sql 2008 server to the 2005 it is successful. The error message i am receiving from the 2005 to 2008 server is as follows : Msg 18456, Level 14, State 1, Line 1
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

I think there may be some sort of compatibility issue going on here. As it is only when im trying to access the 2008 from 2005 this error message appears. The other way is ok (2008 to 2005).
Any advice would be greatly appreciated.

Thanks in advance.
Post #1020670
Posted Monday, November 15, 2010 9:45 AM


SSCommitted

SSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommitted

Group: General Forum Members
Last Login: Friday, April 18, 2014 6:38 AM
Points: 1,620, Visits: 1,310
In your case, it is more than likely that the firewall on the 2008 server is stopping incoming. Turn off the firewall and test.

Chris Powell

George: You're kidding.
Elroy: Nope.
George: Then lie to me and say you're kidding.
Post #1020889
Posted Wednesday, November 17, 2010 4:12 AM
SSC Journeyman

SSC JourneymanSSC JourneymanSSC JourneymanSSC JourneymanSSC JourneymanSSC JourneymanSSC JourneymanSSC Journeyman

Group: General Forum Members
Last Login: Yesterday @ 8:39 AM
Points: 98, Visits: 1,059
Hi and thanks for your reply. I have checked the firewall and it is off. I have ensured that the user id that i have used when creating the linked servers is on both servers with identical permissions. The configuration i have setup for both linked servers also have the same security settings, so I'm at a loss with this.
Post #1022041
Posted Wednesday, November 17, 2010 4:35 AM
SSC-Addicted

SSC-AddictedSSC-AddictedSSC-AddictedSSC-AddictedSSC-AddictedSSC-AddictedSSC-AddictedSSC-Addicted

Group: General Forum Members
Last Login: Yesterday @ 1:24 AM
Points: 488, Visits: 1,288
as a first step, you can try creating i, linked server using sql authentication to ensure its not a firewall issue.

But looking at the error msg you have posted it looks like a typical SPN registration/Delegation error. For more details refer http://www.databasejournal.com/features/mssql/article.php/3696506/Setting-Up-Delegation-for-Linked-Servers.htm


Regards,
Raj

Strictlysql.blogspot.com
Post #1022059
« Prev Topic | Next Topic »

Add to briefcase 12»»

Permissions Expand / Collapse