Can we have Linked Servers when using NTLM?
Posted
by BlueRaja
on Server Fault
See other posts from Server Fault
or by BlueRaja
Published on 2010-04-27T14:31:49Z
Indexed on
2010/04/27
14:33 UTC
Read the original article
Hit count: 633
I don't have access to the Active Directory settings, nor do I have access to change anything on the linked server.
From everything I've read, it seems like this means I cannot use Kerberos - which is a big problem, because I don't know how to use a linked server without it.
Is there any way to connect to a linked server without Kerberos?
Exact problem description
When I connect to the linked server while sitting in front of my server, it works fine; but when I try to connect to the linked server from any other computer (delegating through my server), it gives the error:
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. (Microsoft SQL Server, Error: 18456)
It seems that this is the "double-hop problem," and the usual solution is to enable Kerberos, which requires access to AD and the linked server.
I get the same error when I set security to "Be made using the login's current security context," and I can't use "Be made using this security context" because that appears to use SQL-authentication (which is not enabled on the linked server) instead of NTLM
© Server Fault or respective owner