Need help connecting SQL Server using Kerberos

sarora1 — Sat, 16 Nov 2024 04:47:07 GMT

My Setup: Using tDBConnection(JDBC) component

I am trying to connect to a MSSQL server from linux machine using Windows Authentication. I have Kerberos setup on my server and I have a created a valid ticket. I am using the mssql-jdbc driver. I am running RHEL 7.5 and the machine is connected to a windows domain.

Job Run JVM arguments

-Djava.security.krb5.conf=/etc/krb5.conf

-Djava.security.auth.login.config=/home/USER@DOMAIN/TalendRemoteEngine/etc/SQLJDBCDriver.conf

SQLJDBCDriver.conf

SQLJDBCDriver {
com.sun.security.auth.module.Krb5LoginModule required
useTicketCache=true
useKeyTab=true
keyTab=/home/USER@DOMAIN/trsja8.keytab
renewTGT=true
principal=USER@DOMAIN
doNotPrompt=true;
};

Component settings:

JDBC URL -> "jdbc:sqlserver://MYSERVER;databaseName=MYDATABASE;integratedSecurity=true;authenticationScheme=JavaKerberos"
Driver Class -> ""com.microsoft.sqlserver.jdbc.SQLServerDriver"

The error message I get is:

>>>KinitOptions cache name is KEYRING:persistent:274343438
[FATAL]: tDBConnection_2 Integrated authentication failed. ClientConnectionId:c1db7558-d33b-47bc-98a3-91fb3deefae5
java.lang.RuntimeException: Integrated authentication failed. ClientConnectionId:c1db7558-d33b-47bc-98a3-91fb3deefae5

Re: Need help connecting SQL Server using Kerberos

sarora1 — Wed, 04 Sep 2019 21:20:11 GMT

Answering my own question.

This worked for me with minor modifications:

https://jfrog.com/knowledge-base/authenticate-against-your-mssql-endpoint-using-kerberos-with-the-jdbc-driver/

SQLJDBCDriver {
com.sun.security.auth.module.Krb5LoginModule required
useTicketCache=true
useKeyTab=true
keyTab="path/to/file.keytab" # make sure this is in quotes
renewTGT=true
principal="your_windows_user@your_default_realm" #make sure it is in quotes
doNotPrompt=true;
};

topic Need help connecting SQL Server using Kerberos in Talend Studio

Need help connecting SQL Server using Kerberos

Re: Need help connecting SQL Server using Kerberos