Skip to content

sql-server-linux-active-directory-auth-overview.md

Latest commit

 

History

History
54 lines (39 loc) · 3.23 KB

sql-server-linux-active-directory-auth-overview.md

File metadata and controls

54 lines (39 loc) · 3.23 KB
title Active Directory authentication for SQL Server on Linux | Microsoft Docs
description This article provides an overview of Active Directory Authentication for SQL Server on Linux.
author rothja
ms.date 02/23/2018
ms.author jroth
manager craigg
ms.topic article
ms.prod sql
ms.component
ms.suite sql
ms.custom sql-linux
ms.technology linux
helpviewer_keywords
Linux, AAD authentication

Active Directory authentication for SQL Server on Linux

[!INCLUDEappliesto-ss-xxxx-xxxx-xxx-md-linuxonly]

This article provides an overview of Active Directory (AD) authentication for [!INCLUDEssNoVersion] on Linux. AD authentication is also known as Integrated authentication in [!INCLUDEssNoVersion].

AD authentication overview

AD authentication enables domain-joined clients on either Windows or Linux to authenticate to [!INCLUDEssNoVersion] using their domain credentials and the Kerberos protocol.

AD Authentication has the following advantages over [!INCLUDEssNoVersion] Authentication:

  • Users authenticate via single sign-on, without being prompted for a password.
  • By creating logins for AD groups, you can manage access and permissions in [!INCLUDEssNoVersion] using AD group memberships.
  • Each user has a single identity across your organization, so you don’t have to keep track of which [!INCLUDEssNoVersion] logins correspond to which people.
  • AD enables you to enforce a centralized password policy across your organization.

Configuration steps

In order to use Active Directory authentication, you must have an AD Domain Controller (Windows) on your network.

The details for how to configure AD authentication are provided in the tutorial, Tutorial: Use Active Directory authentication with SQL Server on Linux. The following list provides a summary with a link to each section in the tutorial:

  1. Join a SQL Server host to an Active Directory domain.
  2. Create an AD user for SQL Server and set the ServicePrincipalName.
  3. Configure the SQL Server service keytab.
  4. Create AD-based SQL Server logins in Transact-SQL.
  5. Connect to SQL Server using AD authentication.

Known issues

  • At this time, the only authentication method supported for database mirroring endpoint is CERTIFICATE. WINDOWS authentication method will be enabled in a future release.
  • Third-party AD tools like Centrify, Powerbroker, and Vintela are not supported.

Next Steps

For more information on how to implement Active Directory authentication for SQL Server on Linux, see Tutorial: Use Active Directory authentication with SQL Server on Linux.