Checking MSSQL using kerberos

[gcicala]

Hi everybody.

One of our customer has asked to us if is it possible to check MSSQL server using a kerberos authentication.
Actually we are using these python scripts:

check_mssql_database.py
check_mssql_server.py

but the customer, for security reason, is requesting if it is possible to change the authentication way.

Did you have any experience regarding this type of request?

I hope to hear you soon.
Best Regards
Gabriele

[ssax]

We don't have kerberos setup on any of our systems.

Based on my research I think you would just need to setup your /etc/freetds.conf in order to do that:

https://www.freetds.org/userguide/kerbe ... dm68875600
https://www.freetds.org/userguide/freetdsconf.html

First, let's check to see if your freetds version supports it, please send the output of this command:

Code: Select all

tsql -C

[/s]

You already sent this in the ticket and your system does support it.

It says you'll need to generate the kerberos ticket with kinit:

Code: Select all

yum install krb5-workstation krb5-libs

Let us know if you have any questions.