Click here to view and discuss this page in DocCommentXchange. In the future, you will be sent there automatically.
SAP Sybase SQL Anywhere 16.0 » SQL Anywhere Server - Database Administration » SQL Anywhere database connections » Database connections » Kerberos authentication

 

Using SSPI for Kerberos logins on Windows

In a Windows domain, SSPI can be used on Windows-based computers without a Kerberos client installed on the client computer. Windows domain accounts already have associated Kerberos principals.

Prerequisites

You must already have Kerberos configured before SQL Anywhere can use it. You must already have your SQL Anywhere database server and database configured to use Kerberos.

Context and remarks

SSPI can only be used by SQL Anywhere clients in the Kerberos connection parameter. SQL Anywhere database servers cannot use SSPI—they need a supported Kerberos client other than SSPI.

 Task

  • Connect to the database from the client computer. For example:

    dbisql -c "KERBEROS=SSPI;Server=my_server_princ"

    When Kerberos=SSPI is specified in the connection string, a Kerberos login is attempted.

    A connection attempt using the following SQL statement also succeeds, providing the user has logged on with a user profile name that matches a Kerberos login mapping for the default database on a database server: 

    CONNECT USING 'KERBEROS=SSPI';

Results

You can use SSPI for Kerberos authentication on Windows.

 See also
Copyright © 2014, SAP AG or an SAP affiliate company. - SAP Sybase SQL Anywhere 16.0