Usage Note 42605: Using operating system authentication with SAS/ACCESS® Interface to Microsoft SQL Server
SAS/ACCESS Interface to Microsoft SQL Server supports operating system (OS) authentication to Windows Microsoft SQL Server databases through the use of Kerberos. The DataDirect SQL Server Wire Protocol driver must be running in order for you to enable this feature. The DataDirect protocol driver supports this functionality with Kerberos installed and configured. Because Kerberos can be a complex environment to set up and maintain, it is important to have qualified support at your site. Kerberos is not a SAS product and is not set up or supported by SAS. As a result, SAS does not guarantee that your Kerberos implementation and configuration will work with the SQL Server Wire Protocol.
Use the following odbc.ini entry to initiate Kerberos authentication:
AuthenticationMethod=4
If you receive an error about dynamically loading the native Generic Security Services Application Program Interface (GSSAPI) library, you might need to set the following odbc.ini entry to point to your current GSSAPI library. This example uses the libgssapi_krb5.so.2 library:
GSSClient=libgssapi_krb5.so.2
Important note: This type of authentication does not support supplying a user ID in the form of Domain\Userid from the connection in SAS. Authentication of the user ID is done through the use of Kerberos in the operating system. No user ID or password are required on the connection string in SAS.
Kerberos Authentication Requirements for DataDirect's SQL Server Wire Protocol Driver
Component |
Requirements |
Microsoft SQL server database server |
The database server must be administered by the same domain controller that administers the client and must be running one of the following databases:
- Microsoft SQL Server 2008
- Microsoft SQL Server 2005
- Microsoft SQL Server 2000
- Microsoft SQL Server 2000 Enterprise Edition (64-bit) Service Pack 2 or later
|
Kerberos server |
The Kerberos server is the machine where the user IDs for authentication are administered. The Kerberos server is also the location of the Kerberos KDC.
Network authentication must be provided by Windows Active Directory on one of the following operating systems:
- Windows Server 2003
- Windows 2000 Server Service Pack 3 or later
|
Client |
The client must be administered by the same domain controller that administers the database server. |
To access the latest driver, click the Downloads tab in this note.
Operating System and Release Information
SAS System | SAS/ACCESS Interface to Microsoft SQL Server | 64-bit Enabled AIX | 9.2 TS2M3 | |
64-bit Enabled Solaris | 9.2 TS2M3 | |
HP-UX IPF | 9.2 TS2M3 | |
Linux | 9.2 TS2M3 | |
Linux for x64 | 9.2 TS2M3 | |
Solaris for x64 | 9.2 TS2M3 | |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
Type: | Usage Note |
Priority: | |
Topic: | Data Management ==> Data Sources ==> External Databases ==> MS SQL Server
|
Date Modified: | 2011-03-11 13:07:45 |
Date Created: | 2011-03-04 11:20:17 |