The idea here is to perform a double hop and delegate the credentials of the client (
firstname.lastname@example.org), that have been sent to the
SQL2.example.org server to SQL3.example.org (admittedly this is an SMB file share and not an
My belief is that I need to delegate the credentials in order to access the file share, since the error message that I get when trying to access a VIEW on the SQL2 server which pulls from a Linked Server using the VFPOLEDB Provider which points to the SMB Share on SQL3 when connecting with a client using a KERBEROS auth_scheme without the SPNs setup is:
OLE DB provider "VFPOLEDB" for linked server "LINKEDSERVERNAME" returned message "Invalid path or file name.". Msg 7303, Level 16, State 1, Procedure hatsum, Line 5 Cannot initialize the data source object of OLE DB provider "VFPOLEDB" for linked server "LINKEDSERVERNAME".
Any idea what sort of SPN / AD Computer Delegation settings I need to pull this off?
Please note that when connecting using any other sort of auth_scheme, be that NTLM or SQL, I am able to query the Linked Server without issue; but when using the KERBEROS auth_scheme it yields the error message above.
I also know I can list the SPNs that are already set using
setspn -l <server-name>