tediousjs / tedious

Node TDS module for connecting to SQL Server databases.

Home Page:http://tediousjs.github.io/tedious/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Kerberos support

ErikJansenIRefact opened this issue · comments

Question
Are there plans supporting Kerberos authentication? We currently connect to SQLServer through NTLM and issue a BULK INSERT statement on the database. The BULK INSERT statements needs read access on a network share. This causes a double hop problem and SQLServer now tries to access the file server with an anonymous logon. Kerberos seems to fix this by delegation. A connection made with NTLM isn't sufficient.

Relevant Issues and Pull Requests

Hi @ErikJansenIRefact , unfortunately, we do not have a plan for supporting Kerberos within tedious. We have discussed that we may rework on the whole authentication support with in tedious. One idea is, make different authentication types pluggable, and Kerberos can be one of those pluggable types. If we have a concert plan for this refactor, we will let you know.

Hi,

Thanks for the feedback. I can see an issue is still open addressing pluggable authentication providers but it was never merged. Is it worthwhile taking a look at this issue?

#624

Note: Microsoft is claiming to drop support for NTLM in future releases.