Questions tagged [active-directory]
Active Directory is a special-purpose database which stores network, user and printer data in a hierarchical, replicated, and extensible form.
0
votes
0answers
8 views
LDAP: Empty binddn“” and Authentication type becomes simple from none [migrated]
Am Developing an application in Spring MVC & JPA with Spring Security. Now Integrating the OUD (Oracle Unified Directory) through LDAP. While User authentication the response from the LDAP in OUD ...
0
votes
0answers
13 views
SQL Server 2017 two different Netbios names
Situation:
Migrating SQL Server database from 2003 to SQL Server 2017 moving to new hardware. SQL Server 2003 is on a machine with a netbios name of "Albert" on port X.X.1.22
Installed new SQL ...
1
vote
0answers
43 views
SSRS Azure SQL Database Active Directory - Universal with MFA
Does anyone know when support for Active Directory - Universal with MFA will be included in Reporting Services?
It's available in SSMS.
Visual Studio 2017 Data Source Properties
Reporting Server ...
0
votes
0answers
19 views
Authenticate Oracle Users (DBs on Linux Servers) through AD Without Buying Any New Products
We are wanting to authenticate Oracle Users (DBs on Linux Servers) through Active Directory Without Buying Any New Products. We don't want to buy any Oracle products such as OID/OUD etc.
1.) Is there ...
3
votes
2answers
258 views
CREATE ASSEMBLY System.DirectoryServices.AccountManagement.dll without enabling TRUSTWORTHY
First, this is for SQL Server 2016. If I was on 2017+, I would be using sp_add_trusted_assembly. Just wanted to clarify that before asking the question.
How do you register the assembly System....
0
votes
1answer
127 views
“Active Directory - Password” login in SSMS for Azure AD - Password expired
I'm trying to connect to an Azure SQL DB through SSMS (v17.9.1), using an Azure AD user, that is an Active Directory Admin for my SQL Server that hosts my Azure SQL Database.
I'm able to login with ...
1
vote
0answers
261 views
Grant permissions over linked server
I need to grant select permissions to a sensitive table over the linked server. This table should only grant access to members of an AD group. I currently have other linked servers set up with remote ...
1
vote
3answers
102 views
NTLM vs Kerberos authentication - questions
We have 4 servers, all are members of the same Domain:
1. SQL 2012 on Windows Server 2016
2. SQL 2012 on Windows Server 2012
3. SQL 2017 on Windows Server 2016
4. SQL 2017 on Windows Server 2016
I ...
0
votes
1answer
30 views
Concern on Active Directory Users on Azure SQL Server
I was able to add Azure Active Directory Users to Azure Sql server. My question is not related in including or removing an Azure AD user, but its existence after the user ceases himself/herself.
My ...
0
votes
0answers
25 views
How to add a domain user to windows version postgresql?
I have a windows server 2012R2 (domain member) and a postgresql 9.3 which is installed on it. Now, I want to add a domain user to the postgresql, but I can't find any solution. Any help would be ...
1
vote
1answer
34 views
SQL Server 11.0 and AD Groups
I have a user that has his Active Directory logon set to allow logging into a specific SQL Server, and that works fine. This user is also part of an AD Group that has access to a specific database on ...
1
vote
0answers
65 views
SQL Server in Azure VM + Azure AD + SSIS - how to authenticate?
Our configuration:
Windows Server 2016 VM in Azure, running SQL Server (same as on-prem version)
Azure Active Directory with users etc.
Local Windows 10 PCs are joined to the AAD domain
SQL Server ...
1
vote
1answer
49 views
Microsoft SQL Server v13 bulk add users from active directory
I would like to import all users from Active Directory into Security/Users.
What I do is the following:
Go to Security -> Users
Right click Users -> New User...
User type: Windows user, click on '......
5
votes
1answer
386 views
Service Principal as SQL Active Directory Admin, does it use Graph API?
I'm looking to use a service principal as the server admin, so it can be used in a release pipeline to create further active directory users.
I'm successfully able to make the service principal the ...
0
votes
0answers
24 views
Azure SQL database AAD user can't connect
I've read through the documentation and have tried many, many things to get this to work but am still having trouble.
The AAD user is a member of a group that has been provisioned Contributor ...
1
vote
0answers
20 views
Extracting AD subgroups information [duplicate]
I need to extract AD groups and all of it's subgroup into an excel sheet.Basically the script should loop though each of the AD group and get their subgroup.
AD_Group Subgroup
---------- -----...
2
votes
2answers
553 views
Active Directory not working through SQL server Management studio
I have created a Group in SQL Server and add an Active Directory group to it with which contains users.
When I try to login through Windows authentication, it gives me the following error:
Login ...
2
votes
0answers
74 views
Just one Active Directory group will not sync to SQL Server
Modifying the Active Directory group membership for a particular user propagates to our SQL Server instances as expected — except when one specific group is added. What is causing this issue, ...
0
votes
0answers
282 views
LDAP linked server in SQL Server: what connectivity is required?
In an instance of SQL Server I have created a Linked Server for LDAP queries.
EXEC master.dbo.sp_addlinkedserver @server = N'LDAP', @srvproduct=N'Active Directory Service Interfaces', @provider=N'...
-1
votes
2answers
3k views
How to login to SQL Server using AD user
I created an AD user through Administration tool
then performed following commands:
-- Add AD user EX. thu1 to database master
USE [master]
GO
CREATE LOGIN [QALAB\ABC1] FROM WINDOWS WITH ...
2
votes
0answers
13 views
Is it possible to join servers that are already in a database mirroring session into an Active Directory domain?
We have created a SQL Server database mirroring session on two workgroup servers(not in any domain). Now we are asked to join those two servers into a domain. Is this possible without rebuild the ...
0
votes
3answers
3k views
Why use domain account for SQL Server service?
I'd like to know the pros and cons of using domain accounts vs using local accounts.
Any help will be appreciated.
3
votes
1answer
461 views
Can't deploy SSIS package - The certificate chain was issued by an authority that is not trusted
I have an Azure Windows Server in a managed Domain (AD Domain Services) running SQL Server Enterprise.
I am trying to simply deploy a local (laptop) SSIS project to the remote SSIS server. When the ...
1
vote
0answers
450 views
LDAP Authentication - SQL Server 2017 on Linux
We have installed SQL Server 2017 on Linux server. I am able to connect SQL Server locally as well remotely but with local user access.
I have my AD account created and have AD server information. ...
3
votes
1answer
762 views
set Windows authentication for postgres
I'm trying to set Windows authentication for a postgres server.
The process is not well documented and makes the whole thing, obscure.
I found this doc but it is quite unclear.
In the necessary ...
0
votes
1answer
216 views
Single Domain Controller for SQL Server Always On Availability Group
I was wondering if SQL Server Always On Availability Group supports a single Domain Controller server as opposed to 2 Domain Controllers in every example I've seen. I ask because I suspect that this ...
7
votes
1answer
2k views
Query External LDAP Server from SQL Server
I have done extensive research on querying LDAP Server but so far has not been able to work around. Therefore, asking experts help
Background: I have a client whose LDAP Server is OnPremise (though ...
1
vote
1answer
1k views
Windows Authentication for SQL Server Linked Servers
Currently, on our project, we have a situation: there are a SQL Server 2012 instance IA in domain A and MS SQL Server 2012 instance IB in domain B. Domains A and B are trusted. IB configured as the ...
0
votes
1answer
2k views
Oracle Database authentication through Active Directory
We have Oracle 11g database running on a RHEL 6 server.
and we have a Active Directory domain running on windows 2008 server in same network.
I want to authenticate Oracle database users using this ...
1
vote
1answer
36 views
Autorise computer accounts through AD group
I would like to grant SQL access for computer accounts.
It works if I declare a login for each account, like CREATE LOGIN [contoso.com\srv1$] FROM WINDOWS
but I can't make it works when using a AD ...
0
votes
1answer
47 views
Communication between DB servers outside Active Directory
Dear SQL Server / Windows PROs:
I am trying to set up a solution here (based on SQL Server 2012 Std + Windows Server 2012 R2).
Currently the setup is based on a Cluster (two servers, 1 SAN) and stand ...
3
votes
1answer
2k views
Unable to connect using Azure AD Service Principal on SQL Server
I'm having trouble testing a connection to Azure SQL Server using SSMS with an active directory service principal.
I have an AD Admin account created, and have successfully added a colleague's AD ...
2
votes
1answer
148 views
troubleshooting login failure when AD group seems to be fine
I am using the procedure xp_logininfo to find out what groups a user belongs to.
I have created an AD group called SQLDBA, and added myself to it,
then created a login and granted sysadmin to the ...
3
votes
2answers
415 views
What are points to consider when replacing the SQL Server service account?
In What are the implications of changing the SQL Server Service Logon Account? it mentions that when replacing the SQL Server service account, the service will need to be restarted.
But there is more ...
1
vote
0answers
408 views
Occasional Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Reason: Token-based server access validation failed with an infrastructure error
I know that this issue has been discussed elsewhere and I already read it. Our problem is that this occurs only once a day (roughly), the rest of time everything works fine.
SERVER RS
Windows Server ...
4
votes
4answers
2k views
See who has access to databases via AD group membership
SharePoint has a button to "Check Permissions". Here you can select a user from Active Directory, and it will magically traverse groups and show you all the access the user has on the site based on ...
0
votes
1answer
64 views
Row-based Permission in SQL Server Newbie Question
I am relatively new to this( Database, general security issues) , so I may be over-complicating this. I have a database containing student grades . I want to design a view in which I restrict access ...
0
votes
0answers
32 views
AD Service Account Changes
Are there any ways that can seamlessly enable the operational continuity of the Application upon a Service Account Password Change at Active Directory Level?
Any Ways?
Any Tools?
1
vote
1answer
93 views
Using Mixed mode authentication to authenticate Active Directory users to an application
I have a vendor supplied application that I have very limited access to change. The application controls a machine, and cannot easily be logged off between users (expect up to 5 user changes per hour)...
2
votes
2answers
1k views
Active Directory to authenticate user access to Postgres DB through ODBC driver. Is this possible?
I need for a user to logon to a Postgres DB through either MS Excel or Power BI, without entering any credentials, using solely their Active Directory login. I'm mainly a BI Developer and not usually ...
1
vote
2answers
90 views
Difference Between Sign In and Login (Users and Groups)
I am trying to understand a paragraph from my notes, re Users and Groups in Active Directory. The phrase is:
Users and Groups Sign in, they do not login.
Now, what I (think I) understand is that ...
5
votes
0answers
214 views
IS_MEMBER() in Azure SQLDB not working for AD groups?
I am trying set up RLS and want to leverage AD groups.
DB is created in Azure, and I know AD is working as I can connect using AD acount with SSMS
First test Local Machine, is working as expected (...
3
votes
2answers
4k views
Cannot login to SQL Server as a member of AD group
I have created a login for an AD group:
CREATE LOGIN [MYDOMAIN\Development Admins] FROM WINDOWS WITH DEFAULT_DATABASE=[master]
One of the members of that AD group is a user named DBGuy. I can see ...
1
vote
1answer
880 views
How to change db owner after the associated AD account is disabled
The new Senior DBA requested that the previous Senior DBA's Active Directory account be disabled. He forgot to check, however, for databases where the previous DBA was the owner. We now have ~60 ...
0
votes
0answers
360 views
Resolving SSPI Handshake Failures to Specific User via tracert
Overnight I started receiving A LOT of failed logins and SSPI handshake errors (as indicated below). Now, I can open command prompt and resolve that IP address to a machine name using either >...
1
vote
1answer
519 views
Is password complexity policy linked to Active Directory in SQL Server
We have a change in policy in the organisation and a password complexity policy will be applied to active directory. I know when Enforce password complexity is checked on a SQL Server login it gets it ...
1
vote
2answers
781 views
Should domain “Users” group be removed from the SQL logins for database security?
I am coming from a security standpoint. I see quite a lot of SQL DBs with the entire domain "Users" group ("XXX Domain\Users") added as a login account in SQL.
Does this mean that all users in the ...
1
vote
0answers
64 views
Login token does not acquire correct principal_id for some AD group server principals
The title reflects what I believe is the problem based on my research up to this point. Nonetheless, I will include back information in case it's relevant.
Back info:
Server:
SQL Server 2008 R2
...
0
votes
1answer
108 views
SQL Server: Mixed mode security: Can a non AD user (a local user, remote client) have a trusted connection to SQL?
I have used SQL Server trusted connections for years. It works well when the client app is a domain user.
Imagine this three server config:
dbserver
webserver
domain controller
I now have a ...
1
vote
1answer
305 views
Why does xp_logininfo truncates AD user account names? How to overcome this?
As per this question, I use the following SP to see the members within an AD Group that's been added as a "login" in my database server.
EXEC master.dbo.xp_logininfo 'MyDomain\ADGROUPNAME' , 'members'...
