Enhanced SQL Server Security with Cross Realm kerberos and NTLM authentication from Linux

Status
Not open for further replies.
S

Sumit Sarkar

Guest
Over the past several months, I have been engaged in more security related connectivity projects than the previous several years combined. I’m still trying to figure out what’s driving this between data moving to clouds, corporate compliance, or government regulations across NIST, FISMA, STIGs, FIPS 140-2, etc.

Top 3 security features for SQL Server shops


Let’s break things down into an amazing security toolset you can use for SQL Server data connectivity, as well as other data sources.

1. NTLM Windows Authentication from Unix/Linux
secure_architecture.png



I have been seeing this requirement a lot which is primarily driven by corporate compliance since Microsoft strongly discourages use of SQL Server authentication with a database and password. Therefore, databases supporting only NTLM Windows authentication become isolated from Unix/Linux environments where key business systems are running. You can learn more about our exclusive authentication from Unix/Linux to SQL Server via JDBC.

Yes, we do support NTLM Windows Authentication from Unix/Linux with ODBC as well.

2. Cross Domain Kerberos Authentication


Maybe your organization has selected Kerberos instead of NTLM authentication for cross platform support. However, what happens when you’re trying to authentication with SQL Server running in a different domain?
DataDirect has introduced support for Cross realm or domain Kerberos authentication by introducing a new property, ServicePrincipalName, to specify the target domain.

The value of this option is used along with the hostname and port specified to create the security context for kerberos:
“MSSQLSvc/” + serverName + “:” + portNumber + “@” + servicePrincipalName

I see this commonly when organizations acquire or integrate new business units into existing application infrastructure; or with organization wide data virtualization strategies using Composite Software, Denodo, or Informatica.

3. Secure ODBC/JDBC connectivity over HTTPS to database hosted in a cloud


This requirement is driven by the movement of applications to the cloud, and sometimes sprinkled with a little compliance/regulation. DataDirect Cloud offers secure ODBC/JDBC connectivity over HTTPS to SQL Server databases that reside behind a firewall or cloud. Check out my previous article and Prezi on this topic, and I’m planning to host a related session at PRGS14 next month.

More data, more problems


And solutions

1. Download 15 day trial of the DataDirect Connect ODBC and JDBC SQL Server drivers to securely connect to your SQL Server databases. Or sign up for a trial on www.datadirectcloud.com for ODBC/JDBC over https.

2. Or call 1-800-876-3101 to learn more.

Continue reading...
 
Status
Not open for further replies.
Top