Hi there.
I've been trying to get linked servers set up on two servers. Here is what i
have done in my test environment.
I've got two servers. Test1 and Test2. They are Standard 2005 installs.
I've got two user accounts set as local admin on both servers They run the
SQL service and are called Test1_SA and Test2_SA.
I've added Domain\MyUser on to both master databases for access.
Test1 server and Test1_SA user account are the ones i need to configure for
delegation yes?
I've then done this to setspn(because they don't get added?):
SETSPN -A MSSQLSrv/TEST:1433 DOMAIN\TEST1_SA
SETSPN -A MSSQLSrv/TEST.DOMAIN.COM:1433 DOMAIN\TEST1_SA
SETSPN -A MSSQLSrv/TEST1:1433 DOMAIN\TEST2_SA
SETSPN -A MSSQLSrv/TEST1.DOMAIN.COM:1433 DOMAIN\TEST2_SA
I've then logged on to Test1 server and added Test1_SA to the 'impersonate'
local policy setting.
I've rebootd everything.
Now when i run this to check if everything is ok on the first server first
of all i get NTLM back which is wrong. I should be getting Kerberos?
select auth_scheme from sys.dm_exec_connections
NTLM is returned.
If i try and run a linked query i get this. Well first i run this command:
sp_addlinkedserver Test2
Then i test with this command:
select name from Test2.master.sys.servers where server_id = 0
I then get the response:
Msg 18456, Level 14, State 1, Line 1
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'
I really can't work out what i am doing wrong? Any help appreciated.
Thanks.
l - 29 Jan 2008 17:32 GMT
Are you running sql servers under local system? From your diagnostics it was
my impression. It may be quite beneficial to run it under domain accounts if
you have a domain there. More secure anyways if set up correctly.
When adding linked servers it is best to specify authentication versus doing
default settings. At least you will know yourself what kind of authentication
you are asking for. And then you'll see if what you set up as security
account for your linked server is indeed what is actually trying to
authenticate when you are trying to use your linked server.
in your case the error
> Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'
is actually a very good thing :).
Thanks, Liliya
> Hi there.
> I've been trying to get linked servers set up on two servers. Here is what i
[quoted text clipped - 40 lines]
>
> Thanks.