tedious icon indicating copy to clipboard operation
tedious copied to clipboard

Published 20 hours ago • verified publisher icon tediousjs

Kerberos support

Open ErikJansenIRefact opened this issue 1 year ago • 4 comments

Question Are there plans supporting Kerberos authentication? We currently connect to SQLServer through NTLM and issue a BULK INSERT statement on the database. The BULK INSERT statements needs read access on a network share. This causes a double hop problem and SQLServer now tries to access the file server with an anonymous logon. Kerberos seems to fix this by delegation. A connection made with NTLM isn't sufficient.

Relevant Issues and Pull Requests

ErikJansenIRefact avatar Mar 03 '23 12:03 ErikJansenIRefact

Hi @ErikJansenIRefact , unfortunately, we do not have a plan for supporting Kerberos within tedious. We have discussed that we may rework on the whole authentication support with in tedious. One idea is, make different authentication types pluggable, and Kerberos can be one of those pluggable types. If we have a concert plan for this refactor, we will let you know.

MichaelSun90 avatar Mar 03 '23 17:03 MichaelSun90

Hi,

Thanks for the feedback. I can see an issue is still open addressing pluggable authentication providers but it was never merged. Is it worthwhile taking a look at this issue?

https://github.com/tediousjs/tedious/pull/624

Note: Microsoft is claiming to drop support for NTLM in future releases.

ErikJansenIRefact avatar Mar 06 '23 18:03 ErikJansenIRefact