SQL Extensions Kerberos Authentication

[Erica_Kelly]

I'm having difficulty establishing Kerberos authentication to a SQL server with the SQL Server Extension. If anyone has an example of the configuration that worked for you that would be great. I don't know the format everything needs to be in. I've verified the username and password several times. I've gone to the activegate and ran the powershell command "nslookup -type=srv _kerberos._tcp."my.domain" to find the KDC. If anyone could help me out that would be awesome!

[Erica_Kelly · Accepted solution]

I figured out the issue. Kerberos is case sensitive. So the realm should be all caps. In my case, the KDC server needed to be all caps but the domain needed to be lowercase. So the realm should be DOMAIN.COM and the KDC should follow how it is in your environment but for me it was SERVER.domain.com. If you don't know the KDC you can run this powershell from the Activegate that will run the extension: nslookup -type=srv _kerberos._tcp.YOUR-DOMAIN. Replace "YOUR-DOMAIN" with whatever the name of your domain is. Also your username should not contain the domain at all. So it should just be username, not domain/username nor username@domain.