Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am trying to create linked server on a SQL 2008 server to sql server on another domain. I tried following the advice given in this article: http://msdn.microsoft.com/en-us/library/ee191523%28v=sql.100%29.aspx about setting up Kerberos delegation but it does not seem to work when the server I am wanting to link to is on another domain.

share|improve this question
    
what do you mean by "linked"? Are you trying to do mirroring, log shipping, etc? –  Bret Fisher Mar 9 '11 at 23:57
    
@Bret - I assume just a straight forward "linked server" so you can do joins and subqueries from remote servers –  Mark Henderson Mar 10 '11 at 1:52
    
I am trying to create a Linked Server to another SQL Server so I can reference this other server in queries. –  Paul Mar 10 '11 at 6:10
add comment

2 Answers

up vote 1 down vote accepted

Something that Microsoft does not always communicate clearly is that when using constrained delegation, both servers must be in the same AD domain. Service accounts must also be in the same domain. (Users access resources hosted by these servers can be in any trusted domain).

http://blogs.technet.com/b/ad/archive/2007/10/24/kerberos-constrained-delegation-fe-and-be-servers-must-be-in-same-domain.aspx

However, you should be able to use unconstrained delegation. (Trust this xxx to use any service). This may not be appropriate for security, but it could be a useful test.

Here is another link that has information about the same domain requirement:

http://blogs.technet.com/b/askds/archive/2008/11/25/fun-with-the-kerberos-delegation-web-site.aspx

share|improve this answer
add comment

What I ended up doing was creating a SQL server login on the SQL server on the other domain. Then I created the linked server using that login as the Remote Login under the "Be made using this security context" option under the security section.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.