Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion Groups
DB Engine
SQL ServerMSDESQL Server CE
Services
Analysis (Data Mining)Analysis (OLAP)DTSIntegration ServicesNotification ServicesReporting Services
Programming
CLRConnectivitySQLXML
Other Technologies
ClusteringEnglish QueryFull-Text SearchReplicationService Broker
General
Data WarehousingPerformanceSecuritySetupSQL Server ToolsOther SQL Server Topics
DirectoryUser Groups
Related Topics
MS AccessOther DB ProductsMS Server Products.NET DevelopmentVB DevelopmentJava DevelopmentMore Topics ...

SQL Server Forum / Other Technologies / Replication / November 2006

Tip: Looking for answers? Try searching our database.

SQL 2005 Replication between 2 non trusted domains.

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Andy McDonald - 28 Nov 2006 14:39 GMT
Hello.

Let me paint the picture :-)

I am a Windows Engineer and I have been asked to create a trust between two
domains, this request has come from our SQL engineers who tells me this is
required to set up SQL Replication.

Basically there are 2 servers both having SQL 2005 installed on them, but
the servers are in different domains. We need to set up replicaiton between
them, I have found this article, but its for SQL 2000 and the SQL Engineer is
telling me it can not be done on SQL 2005 without first creating a trust
between the two domains. Im not saying I dont believe him, BUT I dont believe
him.

http://support.microsoft.com/kb/321822

If anyone has any instructions or documentation on this subject, I would be
most grateful.

Thanks in advance

Andy
Hilary Cotter - 28 Nov 2006 14:58 GMT
Not true. Use pass-through authentication. Create the same accounts on all
domains with the same passwords. Use this as the account the agents run
under or the account you are running your merge or distribution agent under.
Note that you can use SQL authentication for this.

If you are using pull subscribers the account the agent will run under needs
read and list file and folder rights to the snapshot share. If its pull this
will not be a concern.

Sounds like your SQL DBAs are as confused as you are.

Signature

Hilary Cotter

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com

> Hello.
>
[quoted text clipped - 24 lines]
>
> Andy
Andy McDonald - 28 Nov 2006 15:15 GMT
Thanks for this.

I have asked the SQl Engineer if this has helped.

He responded :-

pass through doesn't work.  it's down to the domain being passed .  I can
manually connect to the share, but SQL cann't as it's passing the domain name
as well as the user name.

I suggested it may be the lmcompatability level being different on the 2
servers, but I am told he has checked this.

Any other help would be much appreciated.

Andy

> Not true. Use pass-through authentication. Create the same accounts on all
> domains with the same passwords. Use this as the account the agents run
[quoted text clipped - 35 lines]
> >
> > Andy
Hilary Cotter - 28 Nov 2006 16:01 GMT
It works for me. The trick is not to pass  the domain name. So if your
domain name is domain1, and your account name is account1, use account1 not
domain1\account1.

Signature

Hilary Cotter

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com

> Thanks for this.
>
[quoted text clipped - 62 lines]
>> >
>> > Andy
Hilary Cotter - 28 Nov 2006 16:04 GMT
BTW- make sure you are using local machine accounts not domain accounts for
this to work.

Signature

Hilary Cotter

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com

> Thanks for this.
>
[quoted text clipped - 62 lines]
>> >
>> > Andy
Andy McDonald - 28 Nov 2006 16:28 GMT
Hilary.

may be a slight problem there, each installation of SQL is actually a
clustered installation and therefore the accounts used may be a domain
account.

I will check and get back to you.

Thanks foryour help on this.

> BTW- make sure you are using local machine accounts not domain accounts for
> this to work.
[quoted text clipped - 65 lines]
> >> >
> >> > Andy
Hilary Cotter - 28 Nov 2006 19:19 GMT
Is this push or pull? With Push all authentication is done locally on the
publisher for the snapshot. The distribution agent can connect to the
subscriber using a sql account.

Signature

Hilary Cotter

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com

> Hilary.
>
[quoted text clipped - 85 lines]
>> >> >
>> >> > Andy
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.