Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2008 Forums
 SQL Server Administration (2008)
 Linked Server Double Hop Strange Behavior

Author  Topic 

seth2011
Starting Member

10 Posts

Posted - 2011-07-05 : 12:17:25
I'm experiencing what I think is a double-hop problem, but I'm not sure. From my laptop, I log in to "SERVER2008" using SQL Server Management Studio. On SERVER2008, there is a linked server (SERVER2005). I open a new query window and type: "select top 10 * from SERVER2005.mydb.dbo.myTable". This results in an error: Msg 18456, Level 14, State 1, Line 1 Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

The link was set up as "Server Type: SQL Server" and "connections will be made using the login's current security context".

Next, from my laptop, I "remote desktop" to SERVER2008. WORKING ON SERVER2008, I also open SQL Server Management Studio and type the exact same query as above. This time it works and I get the results I'm expecting.

Strangely, now when I go back to my laptop and run the query again, I get results. This is reproducible.

Questions:
- I can't seem to determine how I gain trust and how I lose it
- I don't think other servers in the network have set up Kerberos and their links seem to work (they use SSMS to set up a link between servers and in half a minute they're querying each other happily). The working servers IP addresses start with 10.4 and my lonely 2008 server starts with 10.15. It's a reach, but can that be part of the issue?

Any help appreciated. Thank you.

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2011-07-05 : 12:21:15
Need to set the SPN on both Server2005 and Server2008
Go to Top of Page

seth2011
Starting Member

10 Posts

Posted - 2011-07-05 : 13:49:01
>Need to set the SPN on both Server2005 and Server2008

Does setting this up require a great deal of expertise? If not, is there a link you can provide with instructions?

I'm a developer more than an administrator and I have zero experience in this area.
Go to Top of Page

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2011-07-05 : 14:33:37
Have your network admin set it. See these:

http://technet.microsoft.com/en-us/library/cc773257(WS.10).aspx

http://msdn.microsoft.com/en-us/library/ms191153.aspx

http://technet.microsoft.com/en-us/library/bb735885.aspx
Go to Top of Page
   

- Advertisement -