0

I have a MySQL server that I need to set up as a linked server in SQL Server 2014.

I need a login from the SQL Server (which is a Windows group) to impersonate a username at the MySQL end.

I can see from Googling that this cannot be done.

I can create a new Windows login for every user in the Windows Group and map them, but was wondering if there is a slicker way of doing this?

I am not an admin of the MySQL server so cannot make any config changes there.

1 Answer 1

0

Further reading here (no affiliation): https://searchsqlserver.techtarget.com/tip/Managing-linked-server-security-in-SQL-Server

A linked server offers a few methods for connecting to the remote system. Since MySQL as a remote system does not understand windows authentication or participate in Kerberos you are limited to the following:

  • Login mapping - as you said, each user in the windows group would need to be added to the linked server security tab, with a login on the MySQL side. There is no reason that they cannot "share" the same login on the MySQL side, but each user would need to be added to the linked server on the SQL Side.

  • Be Made Using this security context - You can provide a single username and password here, such that every login on SQL Server would use it when using the Linked Server.

The only one that offers fine grained security control is the Login Mapping method. Otherwise, any user who has access to SQL would have the access to MySQL that is granted by the Linked Server.

1
  • That's what I thought. Sad face
    – SE1986
    Feb 5, 2019 at 14:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.