Merge pull request #32890 from rwestMSFT/rw-0121-linux-freshness

SQL Server on Linux content refresh

Author: v-regandowner

docs/linux/includes/availability-group-multiple-network-interfaces.md

@@ -1,7 +1,7 @@
 ---
 author: rwestMSFT
 ms.author: randolphwest
-ms.date: 10/04/2023
+ms.date: 01/21/2025
 ms.service: sql
 ms.subservice: linux
 ms.topic: include

docs/linux/includes/cluster-pacemaker-concepts.md

@@ -1,14 +1,16 @@
 ---
 author: rwestMSFT
 ms.author: randolphwest
-ms.date: 09/14/2023
+ms.date: 01/21/2025
 ms.service: sql
 ms.subservice: linux
 ms.topic: include
 ms.custom:
   - linux-related-content
 ---
-## <a id="pacemakerNotify"></a> Understand SQL Server resource agent for Pacemaker
+<a id="pacemakerNotify"></a>
+
+## Understand SQL Server resource agent for Pacemaker
 
 [!INCLUDE [sssql17-md](../../includes/sssql17-md.md)] introduced `sequence_number` to `sys.availability_groups` to show if a replica marked as `SYNCHRONOUS_COMMIT` was up to date. `sequence_number` is a monotonically increasing BIGINT that represents how up-to-date the local availability group replica is with respect to the rest of the replicas in the availability group. Performing failovers, adding or removing replicas, and other availability group operations update this number. The number is updated on the primary, then pushed to secondary replicas. Thus a secondary replica that is up-to-date has the same `sequence_number` as the primary.
 

docs/linux/includes/linux-forced-unit-access.md

@@ -1,7 +1,7 @@
 ---
 author: rwestMSFT
 ms.author: randolphwest
-ms.date: 06/29/2023
+ms.date: 01/21/2025
 ms.service: sql
 ms.subservice: linux
 ms.topic: include

docs/linux/includes/linux-supported-platforms-2022.md

@@ -2,7 +2,7 @@
 author: rwestMSFT
 ms.author: randolphwest
 ms.reviewer: vanto
-ms.date: 11/17/2023
+ms.date: 01/21/2025
 ms.service: sql
 ms.subservice: linux
 ms.topic: include

docs/linux/includes/odbc-ubuntu.md

@@ -1,7 +1,7 @@
 ---
 author: rwestMSFT
 ms.author: randolphwest
-ms.date: 07/11/2023
+ms.date: 01/21/2025
 ms.service: sql
 ms.topic: include
 ms.custom:
@@ -58,7 +58,7 @@ Use the following steps to install the **mssql-tools18** on Ubuntu.
    To update to the latest version of **mssql-tools**, run the following commands:
 
    ```bash
-   sudo apt-get update  
+   sudo apt-get update
    sudo apt-get install mssql-tools18
    ```
 

docs/linux/new-to-linux-resources.md

@@ -1,11 +1,10 @@
 ---
-title: New to linux resources for SQL users
+title: New to Linux Resources for SQL Users
 titleSuffix: SQL Server
 description: Resources and guidance for SQL Server users who are new to Linux.
 author: rwestMSFT
 ms.author: randolphwest
-ms.reviewer: randolphwest
-ms.date: 03/15/2023
+ms.date: 01/21/2025
 ms.service: sql
 ms.subservice: linux
 ms.topic: conceptual
@@ -18,7 +17,7 @@ ms.custom:
 
 This article is intended to provide a learning path through an introduction of Linux concepts. Use the sections in the article as a guided learning path to familiarize yourself with the Linux environment.
 
-This is not intended to be a comprehensive list but instead provides the bare minimum you need to help you administer and navigate your [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] on Linux environment. See the [full list of tutorials](https://www.linux.org/forums/linux-beginner-tutorials.123/) to learn more.
+This isn't intended to be a comprehensive list but instead provides the bare minimum you need to help you administer and navigate your [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] on Linux environment. See the [full list of tutorials](https://www.linux.org/forums/linux-beginner-tutorials.123/) to learn more.
 
 ## What is Linux?
 

docs/linux/quickstart-install-connect-red-hat.md

@@ -4,7 +4,7 @@ titleSuffix: SQL Server
 description: This quickstart shows how to install SQL Server on Red Hat Enterprise Linux (RHEL) and then create and query a database with sqlcmd.
 author: rwestMSFT
 ms.author: randolphwest
-ms.date: 11/18/2024
+ms.date: 01/21/2025
 ms.service: sql
 ms.subservice: linux
 ms.topic: conceptual
@@ -43,7 +43,7 @@ For more information on supported platforms, see [Release notes for SQL Server 2
 
 > [!TIP]  
 > This tutorial requires user input and an internet connection. If you're interested in the [unattended](sql-server-linux-setup.md#unattended) or [offline](sql-server-linux-setup.md#offline) installation procedures, see [Installation guidance for SQL Server on Linux](sql-server-linux-setup.md).
-If you choose to have a pre-installed [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] VM on RHEL ready to run your production-based workload, then please follow the [best practices](/azure/azure-sql/virtual-machines/windows/performance-guidelines-best-practices-checklist) for creating the SQL Server VM.
+If you choose to have a pre-installed [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] VM on RHEL ready to run your production-based workload, follow the [best practices](/azure/azure-sql/virtual-machines/windows/performance-guidelines-best-practices-checklist) for creating the SQL Server VM.
 
 <!--SQL Server 2019 on Linux-->
 ::: moniker range="=sql-server-linux-ver15 || =sql-server-ver15"

docs/linux/sql-server-linux-active-directory-authentication.md

@@ -5,7 +5,7 @@ description: This tutorial provides the configuration steps for Active Directory
 author: amitkh-msft
 ms.author: amitkh
 ms.reviewer: vanto, randolphwest
-ms.date: 11/18/2024
+ms.date: 01/21/2025
 ms.service: sql
 ms.subservice: linux
 ms.topic: tutorial
@@ -108,7 +108,7 @@ Configuring Active Directory authentication for [!INCLUDE [ssnoversion-md](../in
    ```
 
    > [!NOTE]  
-   > SPNs can take several minutes to propagate through your domain, especially if the domain is large. If you receive the error, `kvno: Server not found in Kerberos database while getting credentials for MSSQLSvc/<fully qualified domain name of host machine>:<tcp port>@CONTOSO.COM`, please wait a few minutes and try again.</br></br> The above commands will only work if the server has been joined to an Active Directory domain, which was covered in the previous section.
+   > SPNs can take several minutes to propagate through your domain, especially if the domain is large. If you receive the error, `kvno: Server not found in Kerberos database while getting credentials for MSSQLSvc/<fully qualified domain name of host machine>:<tcp port>@CONTOSO.COM`, wait a few minutes and try again. The previous commands only work if the server has been joined to an Active Directory domain, which was covered in an earlier section.
 
 1. Using **[ktpass](/windows-server/administration/windows-commands/ktpass)**, add keytab entries for each SPN using the following commands on a Windows machine Command Prompt:
 
@@ -163,14 +163,13 @@ Configuring Active Directory authentication for [!INCLUDE [ssnoversion-md](../in
    sudo systemctl restart mssql-server
    ```
 
-   > [!TIP]  
-   > Optionally, disable UDP connections to the domain controller to improve performance. In many cases, UDP connections consistently fail when connecting to a domain controller, so you can set config options in `/etc/krb5.conf` to skip UDP calls. Edit `/etc/krb5.conf` and set the following options:
-   >  
-   > ```bash
-   > /etc/krb5.conf
-   > [libdefaults]
-   > udp_preference_limit=0
-   > ```
+   Optionally, you can disable UDP connections to the domain controller to improve performance. In many cases, UDP connections consistently fail when connecting to a domain controller, so you can set config options in `/etc/krb5.conf` to skip UDP calls. Edit `/etc/krb5.conf` and set the following options:
+
+   ```bash
+   /etc/krb5.conf
+   [libdefaults]
+   udp_preference_limit=0
+   ```
 
 At this point, you're ready to use Active Directory-based logins in [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)].
 

docs/linux/sql-server-linux-active-directory-join-domain.md

@@ -5,7 +5,7 @@ description: This article provides guidance joining a SQL Server Linux host mach
 author: amitkh-msft
 ms.author: amitkh
 ms.reviewer: vanto, randolphwest
-ms.date: 06/27/2024
+ms.date: 01/21/2025
 ms.service: sql
 ms.subservice: linux
 ms.topic: conceptual
@@ -253,7 +253,9 @@ After the basic configuration and connectivity with domain controller is verifie
 - [Option 1: Use an SSSD package](#option1)
 - [Option 2: Use third-party OpenLDAP provider utilities](#option2)
 
-### <a id="option1"></a> Option 1: Use SSSD package to join Active Directory domain
+<a id="option1"></a>
+
+### Option 1: Use SSSD package to join Active Directory domain
 
 This method joins the [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] host to an Active Directory domain using **realmd** and **sssd** packages.
 
@@ -309,9 +311,9 @@ Use the following steps to join a [!INCLUDE [ssnoversion-md](../includes/ssnover
 
    ---
 
-2. If the Kerberos client package installation prompts you for a realm name, enter your domain name in uppercase.
+1. If the Kerberos client package installation prompts you for a realm name, enter your domain name in uppercase.
 
-3. After you confirm that your DNS is configured properly, join the domain by running the following command. You must authenticate using an Active Directory account that has sufficient privileges in Active Directory to join a new machine to the domain. This command creates a new computer account in Active Directory, creates the `/etc/krb5.keytab` host keytab file, configures the domain in `/etc/sssd/sssd.conf`, and updates `/etc/krb5.conf`.
+1. After you confirm that your DNS is configured properly, join the domain by running the following command. You must authenticate using an Active Directory account that has sufficient privileges in Active Directory to join a new machine to the domain. This command creates a new computer account in Active Directory, creates the `/etc/krb5.keytab` host keytab file, configures the domain in `/etc/sssd/sssd.conf`, and updates `/etc/krb5.conf`.
 
    Because of an issue with **realmd**, first set the machine hostname to the FQDN instead of to the machine name. Otherwise, **realmd** might not create all required SPNs for the machine and DNS entries won't automatically update, even if your domain controller supports dynamic DNS updates.
 
@@ -339,7 +341,7 @@ Use the following steps to join a [!INCLUDE [ssnoversion-md](../includes/ssnover
 
    For more information, see how to [configure SSSD manually](https://access.redhat.com/articles/3023951), and [configure NSS to work with SSSD](https://docs.redhat.com/documentation/red_hat_enterprise_linux/7/html/system-level_authentication_guide/configuring_services#Configuration_Options-NSS_Configuration_Options).
 
-4. Verify that you can now gather information about a user from the domain, and that you can acquire a Kerberos ticket as that user. The following example uses **id**, [kinit](https://web.mit.edu/kerberos/krb5-1.12/doc/user/user_commands/kinit.html), and [klist](https://web.mit.edu/kerberos/krb5-1.12/doc/user/user_commands/klist.html) commands for this.
+1. Verify that you can now gather information about a user from the domain, and that you can acquire a Kerberos ticket as that user. The following example uses **id**, [kinit](https://web.mit.edu/kerberos/krb5-1.12/doc/user/user_commands/kinit.html), and [klist](https://web.mit.edu/kerberos/krb5-1.12/doc/user/user_commands/klist.html) commands for this.
 
    ```bash
    id user@contoso.com
@@ -361,14 +363,16 @@ Use the following steps to join a [!INCLUDE [ssnoversion-md](../includes/ssnover
 
 For more information, see the Red Hat documentation for [Discovering and Joining Identity Domains](https://docs.redhat.com/documentation/red_hat_enterprise_linux/7/html/windows_integration_guide/realmd-domain).
 
-### <a id="option2"></a> Option 2: Use third-party OpenLDAP provider utilities
+<a id="option2"></a>
+
+### Option 2: Use third-party OpenLDAP provider utilities
 
 You can use third-party utilities such as [PBIS](https://www.beyondtrust.com/), [VAS](https://www.oneidentity.com/products/one-identity-safeguard-authentication-services), or [Centrify](https://delinea.com/centrify). This article doesn't cover steps for each individual utility. You must first use one of these utilities to join the Linux host for [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] to the domain before continuing forward.
 
 [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] doesn't use third-party integrator's code or library for any Active Directory-related queries. [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] always queries Active Directory using OpenLDAP library calls directly in this setup. The third-party integrators are only used to join the Linux host to Active Directory domain, and [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] doesn't have any direct communication with these utilities.
 
 > [!IMPORTANT]  
-> Please see the recommendations for using the `mssql-conf network.disablesssd` configuration option in the Additional configuration options section of the article [Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md#additionalconfig).
+> See the recommendations for using the `mssql-conf network.disablesssd` configuration option in the Additional configuration options section of the article [Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md#additionalconfig).
 
 Verify that your `/etc/krb5.conf` is configured correctly. For most third-party Active Directory providers, this configuration is done automatically. However, check `/etc/krb5.conf` for the following values to prevent any future issues:
 

docs/linux/sql-server-linux-ad-auth-rotate-keytabs.md

@@ -4,7 +4,7 @@ description: Recommendations on rotating keytabs for SQL Server on Linux using a
 author: amitkh-msft
 ms.author: amitkh
 ms.reviewer: vanto, randolphwest
-ms.date: 11/18/2024
+ms.date: 01/21/2025
 ms.service: sql
 ms.subservice: linux
 ms.topic: conceptual
@@ -90,7 +90,7 @@ You can install **adutil** and integrate it with **mssql-conf**, which means you
    sqluser@contoso.com's password:
    Confirm sqluser@contoso.com's password:
 
-   SQL Server needs to be restarted in order to adopt the new AD configuration, please run 'systemctl restart mssql-server.service'.
+   SQL Server needs to be restarted in order to adopt the new AD configuration. To restart, run `systemctl restart mssql-server.service`.
 
    bash-4.4$ klist -kte /var/opt/mssql/secrets/mssql.keytab
    Keytab name: FILE:/var/opt/mssql/secrets/mssql.keytab