Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 General SQL Server Forums
 New to SQL Server Administration
 linked server double hop authentication

Author  Topic 

ramaiah
Starting Member

27 Posts

Posted - 2011-02-09 : 15:57:53
Hi Team,
We have server A,B and C. We have configured Linked server B on A. We have a service account 'domain\name' having permissions on A, B and C. We are trying to access the linked server from C, getting double hop authentication issue 'NT AUTHORITY\ANONYMOUS LOGIN'. How we can resolve this issue. Please suggest us.

Thank you,
-Ram

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2011-02-09 : 16:26:51
IIRC, it's due to Kerberos. We use SQL authentication for our linked servers as a result.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

ramaiah
Starting Member

27 Posts

Posted - 2011-02-09 : 17:14:49
Is there any work around for using windows authentication?
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2011-02-09 : 17:22:21
Yes get Kerberos working.

Here's a related email thread: http://www.sqlservercentral.com/Forums/Topic471172-359-1.aspx

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

ramaiah
Starting Member

27 Posts

Posted - 2011-02-09 : 17:45:55
Hi Tara,

I have not find any resolution in the mentioned article. Can you please help me?

Thank you,
-Ram.
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2011-02-09 : 17:53:51
You'll need to work with your server admin to get Kerberos working. It's not something that I can help with.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

ramaiah
Starting Member

27 Posts

Posted - 2011-02-09 : 17:55:14
ok..Thanks for your help Tara
Go to Top of Page

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2011-02-09 : 22:30:09
You need to set the SPNs, and allow delegation for the sql service accounts in AD.

And of course, the service account needs to be a domain account.
Go to Top of Page
   

- Advertisement -