CODEWITHSUNDEEP
sql-serveriiskerberos
Eduard
Eduard

Reputation: 674

Kerberos between IIS and SQLServer

Let's say I have computer SQLCOMP with MSSqlServer running under a local account (.\sqllocuser).

I have another computer IISCOMP, with an IIS application (running under a domain account MYDOM\IISUSER).

The two servers are on the same domain. Can the IIS app connect into SQLServer using Kerberos?

If it is possible, which configuration I need to set?

Which SPNs I need? In particular which SPNs should be created for the MSSQLServer runnning under a local account? One related to the host (like when running under Network Services)?

Upvotes: 0

Views: 368

Answers (1)

muhmud
muhmud

Reputation: 4604

This isn't possible.

The SPN you set up needs to be mapped to the Windows Domain Account that starts SQL Server, hence you can't use a local account.

http://msdn.microsoft.com/en-gb/library/cc280745%28v=sql.105%29.aspx

Upvotes: 1

Related Questions