Linux server > NTLM Authentication via PDO

Question

Shaun Gorneau 0

I have a situation where I must establish a SQL Server connection from a linux box using PHP.

I have the correct Microsoft ODBC driver installed, but I'm unsure how to configure the PDO connection to make use of NTLM authentication.

1 answer

Answer 1

Bruce (SqlWork.com) 77,686 Volunteer Moderator

You don’t use Ntlm, but rather Kerberos. You would use the knint to get the token. Linux only supports one Kerberos user at a time.

note: on a mac just use the ticket viewer app to login.

Shaun Gorneau 0 Reputation points

2024-12-16T16:07:20.31+00:00

I didn't set up the authentication mechanism and don't have access to do so ... but I need to connect, and NTLM is the method. Are you saying "you don't" as in "you shouldn't" or as in "you can't"?
Bruce (SqlWork.com) 77,686 Reputation points Volunteer Moderator

2024-12-16T20:35:28.5933333+00:00

your sqlserver needs to be configured to support kerberos to use a trusted connection from linux. this is the default on any modern windows network setup. (connecting from windows should also use kerberos as NTLM has been deprecated).

https://learn.microsoft.com/en-us/troubleshoot/sql/database-engine/connect/using-kerberosmngr-sqlserver

on linux you use the kinit utility to perform kerberos authentication. once knit has logged in, you just use trusted connections for sqlserver just like windows.

note: I use a Mac (not linux), and while kinit can be used to connect, I use the simpler ticket viewer app. the main trick is determining the Kerberos realm name. on a windows box type ifconfig /all. its the domain suffix.
Shaun Gorneau 0 Reputation points

2024-12-16T23:16:02.95+00:00

OK, thanks for the taking the time and for the good info. I appreciate it.