Re: FreeTDS and SQL Server using NT Authentication

Hrm, that may explain our problems.  We *do* have a firewall between our 
 freetds machine and the NT PDC.  The FreeTDS box is one of ours, the 
SQL Server is on our client's network.

We've already poked holes in the firewall for port 1433 between our 
FreeTDS server and the SQL Server, I'm assuming NT authentication will 
require additional ports?  If so which.

(Sigh) Sorry, I don't personally maintain any NT/2003 boxes so this 
wasn't immediately obvious to me.

--Tony

Lowden, James K wrote:
> > From: Tony Bibbs [mailto:tony@xxxxxxxxxxxxx]
> > Sent: September 25, 2003 4:09 PM
> >
> > I have developed  PHP app for a client.  We developed the system 
> > in-house against our SQL server using SQL Server authentication.  The 
> > production machine is remote and using NT authentication.  
>
> ...
>
> > [RemoteSQLServer]
> >         host = XXX.XXX.XXX.XXX (I have replaced this with actual IP)
> >         port = 1433
> >         tds version = 8.0
> >         try domain login = yes
> >         try server login = no
>
> ...
>
> > #> ./tsql -SRemoteSQLServer -UsomeUserName -PsomePassword
>
> ...
>
> > Msg 18452, Level 14, State 1, Server, Line 0
> > Login failed for user 'someUserName'. Reason: Not associated with a 
> > trusted SQL Server Connection
>
>
> Where is the domain name indicated?  Does:
>
> $ tsql -SRemoteSQLServer -U 'DOMAIN\someUserName' -PsomePassword
>
> solve anything?   You can add the domain name to your freetds.conf entry
> with:
>
>         nt domain = DOMAIN
>
> Also, ensure there's no firewall between the FreeTDS box and the NT PDC.  
>
> HTH.  
>
> --jkl
> -----------------------------------------
> The information contained in this transmission may contain privileged and 
> confidential information and is intended only for the use of the person(s) 
> named above. If you are not the intended recipient, or an employee or agent 
> responsible for delivering this message to the intended recipient, any review, 
> dissemination, distribution or duplication of this communication is strictly 
> prohibited. If you are not the intended recipient, please contact the sender 
> immediately by reply e-mail and destroy all copies of the original message. 
> Please note that we do not accept account orders and/or instructions by e-mail, 
> and therefore will not be responsible for carrying out such orders and/or 
> instructions.
>
>
> _______________________________________________
> FreeTDS mailing list
> FreeTDS@xxxxxxxxxxxxxxxxx
> http://lists.ibiblio.org/mailman/listinfo/freetds

--
+----------------------------------------------------------------------+
|Tony Bibbs         |[R]egardless of what you may think of our penal   |
|tony@xxxxxxxxxxxxx |system, the fact is that every man in jail is one |
|                   |less potential fisherman to clutter up your       |
|                   |favorite pool or pond. --Ed Zern                  |
+----------------------------------------------------------------------+