Connecting Reporting database with Kerberos and windows authentication
Answered
Hi,
We are trying to install and make yellow fin work for Kerberos and windows authentication,
and we are using these paramaters(;integratedSecurity=true;authenticationScheme=JavaKerberos) appended in the web.xml jdbc connection string wanted to know, if YF supports Kerberos
and can you help us list down the step involved in connecting to such a kind database.
Regards
Srikanth.J
Hi
This is log error which we are getting when get connect to database using ;integratedSecurity=true;authenticationScheme=JavaKerberos parameters
string:
2016-11-09 07:23:03 NOTICE: url:jdbc:jtds:sqlserver://SBX01:1433/REPORTS;domain=DBOX;instance=SQLEXPRESS;integratedSecurity=true;authenticationScheme=JavaKerberos
result:
WARN: Failed to create initial connection at DBConnectionPool startup (attempt 1). Will try again in 15 seconds. java.sql.SQLException: Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.
Regards
Srikanth.J
Hi
This is log error which we are getting when get connect to database using ;integratedSecurity=true;authenticationScheme=JavaKerberos parameters
string:
2016-11-09 07:23:03 NOTICE: url:jdbc:jtds:sqlserver://SBX01:1433/REPORTS;domain=DBOX;instance=SQLEXPRESS;integratedSecurity=true;authenticationScheme=JavaKerberos
result:
WARN: Failed to create initial connection at DBConnectionPool startup (attempt 1). Will try again in 15 seconds. java.sql.SQLException: Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.
Regards
Srikanth.J
Hi Srikanth,
Apologies for the delayed response on this.
It looks like you're simply updating the web.xml to add the kerberos authentication switch, which should work.
The error you're facing is pretty specific and returned by the driver itself, so the first thing we need to do is confirm that the connection details are correct. and that you're using the JTDS 3.0 (or later) driver.
1. Confirm the details are correct.
Use a 3rd party DB tool such as DB Visualizer or SQL Squirrel
Just use the connection wizard and use the same JDBC URL like in the web.xml
If this works, it should work in YF.
If the above doesn't work, ensure that you're using a DB driver that supports it:
JTDS 3.1 can be found here
Alternatively, you can also try with the Microsoft JDBC driver
The goal is to confirm you can get a successful connection outside of YF to identify where the issue lies.
Once you have done this, and still have troubles with YF, just let us know and we can look further into this.
Thanks,
David
Hi Srikanth,
Apologies for the delayed response on this.
It looks like you're simply updating the web.xml to add the kerberos authentication switch, which should work.
The error you're facing is pretty specific and returned by the driver itself, so the first thing we need to do is confirm that the connection details are correct. and that you're using the JTDS 3.0 (or later) driver.
1. Confirm the details are correct.
Use a 3rd party DB tool such as DB Visualizer or SQL Squirrel
Just use the connection wizard and use the same JDBC URL like in the web.xml
If this works, it should work in YF.
If the above doesn't work, ensure that you're using a DB driver that supports it:
JTDS 3.1 can be found here
Alternatively, you can also try with the Microsoft JDBC driver
The goal is to confirm you can get a successful connection outside of YF to identify where the issue lies.
Once you have done this, and still have troubles with YF, just let us know and we can look further into this.
Thanks,
David
Hi Srikanth,
How did you go with this?
Regards,
David
Hi Srikanth,
How did you go with this?
Regards,
David
Hi Srikanth,
Hope you've been well.
I'm going to close down this ticket due to inactivity, but if you ever wanted to revisit this or needed assistance with anything else. please let me know.
Regards,
David
Hi Srikanth,
Hope you've been well.
I'm going to close down this ticket due to inactivity, but if you ever wanted to revisit this or needed assistance with anything else. please let me know.
Regards,
David
Replies have been locked on this page!