FreeTDS User Guide: A Guide to Installing, Configuring and Running FreeTDS | ||
---|---|---|
Prev | Chapter 4. Advanced Configurations | Next |
As mentioned in the installation chapter, SQL Server includes the ability to use domain logins instead of standard server logins. The advantage of doing this is that the passwords are encrypted on the wire using a challenge-response protocol (for more information search the net for NTLMSSP authentication).
To use NTLM authentication, FreeTDS needs the support of an encryption library OpenSSL, and must be configured using the --with-ssl flag.
$ ./configure --with-ssl=/usr/local $ make $ su - Password: # make install
Example 4-4. Turning on domain login support in freetds.conf
[mssql] host = ntbox.mydomain.com port = 1433 tds version = 7.0 try domain login = yes try server login = no
Note: As of version 0.60, FreeTDS's support for domain logins is very new. It appears that it may also be mutually exclusive. That is, although we would like it to be the case that you could set both try domain login and try server login to yes, we're not sure you can. Not yet, anyway. To work around this, you can simply use two sections for the server (one in each mode) in freetds.conf.