Create a linked SQL server across a domain

delegationkerberossql-server-2008

I am trying to create linked server on a SQL 2008 server to sql server on another domain. I tried following the advice given in this article: http://msdn.microsoft.com/en-us/library/ee191523%28v=sql.100%29.aspx about setting up Kerberos delegation but it does not seem to work when the server I am wanting to link to is on another domain.

Best Answer

Something that Microsoft does not always communicate clearly is that when using constrained delegation, both servers must be in the same AD domain. Service accounts must also be in the same domain. (Users access resources hosted by these servers can be in any trusted domain).

http://blogs.technet.com/b/ad/archive/2007/10/24/kerberos-constrained-delegation-fe-and-be-servers-must-be-in-same-domain.aspx

However, you should be able to use unconstrained delegation. (Trust this xxx to use any service). This may not be appropriate for security, but it could be a useful test.

Here is another link that has information about the same domain requirement:

http://blogs.technet.com/b/askds/archive/2008/11/25/fun-with-the-kerberos-delegation-web-site.aspx

Related Topic