KERBEROS AND SSIS 2008 ?

  • Hi,

    Is it possible to implement Kerberos for SQL Server Integration Services 2008 ?

    Microsoft article seems to say NO "http://msdn.microsoft.com/en-us/library/aa337083.aspx".

    Can you confirm this information please ? Is there a workaround ?

    In my architecture there is one ssis 2008 server S1. SQL Server 2008 is installed on second server S2. DTSx are stored in msdb database.

    When I want to connect to ssis instance with Management Studio from client computer I receive error:

    Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

    Thank you for your help

    eole

  • eoleweb (3/11/2010)


    Hi,

    Is it possible to implement Kerberos for SQL Server Integration Services 2008 ?

    Microsoft article seems to say NO "http://msdn.microsoft.com/en-us/library/aa337083.aspx".

    Can you confirm this information please ? Is there a workaround ?

    In my architecture there is one ssis 2008 server S1. SQL Server 2008 is installed on second server S2. DTSx are stored in msdb database.

    When I want to connect to ssis instance with Management Studio from client computer I receive error:

    Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

    Thank you for your help

    eole

    That is coming from your service accounts. Try changing the service accounts to a Domain Account. We had the same sort of setup and resolved it through the use of Domain Accounts.

    Jason...AKA CirqueDeSQLeil
    _______________________________________________
    I have given a name to my pain...MCM SQL Server, MVP
    SQL RNNR
    Posting Performance Based Questions - Gail Shaw[/url]
    Learn Extended Events

  • Hi,

    We use service domain account for SSIS and SQL Server engines.

    It's necessary to implement setspn for those services.

    But I don't now exactly the method.

    Somebody can help me ?

    Thanks

    eoleweb

  • As per the article, the SQL Server Integration Services service does not support Kerberos delegation. Therefore, there is no SPN available for the SSIS side. For configuring a SQL Server for Kerberos authentication, where it's the last hop, see this:

    Configuring Kerberos Authentication[/url]

    To manage the packages, you could remote desktop into the server where SSIS is installed and manage the packages from there. You won't be able to from a separate client in this setup.

    K. Brian Kelley
    @kbriankelley

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply