0

I have a Windows machine that should connect to an MSSQL instance with an ODBC driver using "windows integrated authentication".

Now according to the specifications of the login message the server is using SSPI for that. And if I understood the sspi documentation correctly, then SSPI could be use by Kerberos, NTLM or some other authentication protocol.

Now let's say that I want to enforce ODBC to user Kerberos, is it possible to do that by configuring either one of the following components?

  • SQL Server
  • Active Directory
  • ODBC driver

(Hope that my question makes sense? I am really new to the world of Windows authentication and protocols and really confused by all the docs..)

1

1 Answer 1

2

SQL Server will always prefer Kerberos over NTLM, however, NTLM is used as a fallback by SQL Server to ensure connectivity. You cannot disable NTLM authentication at the SQL level, this can only be done at the domain level, however, if you have Kebreros authentication properly configured then SQL Server will use that over NTLM.

See this article for information on properly configuring Kerberos in SQL Server:

https://www.sqlservercentral.com/articles/configuring-kerberos-authentication

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.