40 lines
1.5 KiB
Markdown
40 lines
1.5 KiB
Markdown
---
|
||
tags:
|
||
- upnote-import
|
||
---
|
||
|
||
# SQL-Server und KERBEROS Service Principal Name (SPN)
|
||
|
||
[Setting Up Kerberos Authentication for SQL Server: A Complete Guide from Scratch](https://www.youtube.com/embed/rLGvzMi74Jc?feature=oembed "Setting Up Kerberos Authentication for SQL Server: A Complete Guide from Scratch")
|
||
|
||
[SQL Server - Could not register the Service Principal Name - Alexandre VIOT](https://www.alexandreviot.net/2014/09/30/sql-server-could-not-register-the-service-principal-name-spn/)
|
||
|
||
[Questions About Kerberos and SQL Server That You Were Too Shy to Ask - Simple Talk](https://www.red-gate.com/simple-talk/databases/sql-server/database-administration-sql-server/questions-about-kerberos-and-sql-server-that-you-were-too-shy-to-ask/)
|
||
|
||
|
||
|
||
## Umsetzung für DocuWare
|
||
|
||
für lokale Konten wird anstelle des AD-Konto der lokale Maschinenname verwendet. Daher zum Löschen „internal\\KRA-DW-SQL“ verwenden.
|
||
|
||
Zur Neuanlage des SPNs wird dann das Dienstkonto „internal\\docuwaresrv“ verwendet.
|
||
|
||
```
|
||
Setspn -D MSSQLSvc/KRA-DW-SQL.internal.lan:1433 internal\KRA-DW-SQL
|
||
Setspn -D MSSQLSvc/KRA-DW-SQL.internal.lan internal\KRA-DW-SQL
|
||
|
||
Setspn -S MSSQLSvc/KRA-DW-SQL.internal.lan internal\docuwaresrv
|
||
Setspn -S MSSQLSvc/KRA-DW-SQL.internal.lan:Inst1 internal\docuwaresrv
|
||
Setspn -S MSSQLSvc/KRA-DW-SQL.internal.lan:1433 internal\docuwaresrv
|
||
```
|
||
|
||
Kontrolle:
|
||
|
||
```
|
||
SELECT auth_scheme FROM sys.dm_exec_connections -- WHERE session_id = @@spid;
|
||
|
||
sp_readerrorlog 0 , 1 , spn
|
||
```
|
||
|
||
<br>
|