Seeking response on: LDAP Authentication with SQL Server 2017 on Linux
Few days back I got an email from one of the reader of this blog “Amit Bhatt”. As I haven’t worked much with the AD/LDAP stuff, thus I thought to throw this question to you guys thru this blog post. I also feel this may also help other Developers/DBAs hunting for similar stuff.
Here he goes:
We have installed SQL Server 2017 on Linux server. I am able to connect SQL Server locally as well remotely but with local user access.
I have my AD account created and have AD server information. Can you please help me how can I connect using my AD account to SQL Server 2017 on Linux remotely?
I heard something about LDAP Authentication. Is it possible to use this concept without adding Linux server to AD domain? Our security team does not allow to add Linux server in Active Directory group.
I am stucked here since last many days, requesting assistance on urgent basis.
Please provide your suggestion on the comment section below.
–> Responses:
1. To support AD Authentication, SQL depends on SSSD, SPN and a keytab file which have the required tokens to talk to AD. Without these in place SQL cannot talk to AD which is necessary for AD authentication.
Ref: https://docs.microsoft.com/en-us/sql/linux/sql-server-linux-active-directory-authentication
2. If you are looking to login to SQL Server on linux with Windows authentication the linux server should be joined to the domain. If the server cannot be added to domain then SQL authentication is the way to go. The below link has more details to configure windows authentication, https://docs.microsoft.com/en-us/sql/linux/sql-server-linux-active-directory-authentication
–> Videos on Linux:
2. Install SQL Server on Linux Azure VM
3. Connect SQL Server on Linux VM from SSMS
Thanks for the response. Actually our security team does not allow Linux server to be added to Active Directory however the server is in domain.
Amit Bhatt