我们希望能够做的是为sql server使用cnames.我们使用默认实例,每个服务器只需要一个实例.
我关心的是kerberos,IE / .NET和CNAME的已知问题.我想知道只要我确保为CNAME和sql服务器的A-Record正确设置SPN,这个配置是否会起作用?
解决方法
““You must register the Kerberos service principal names (SPNs),the
host name,and the fully-qualified domain name (FQDN) for all the new
DNS alias (CNAME) records. If you do not do this,a Kerberos ticket
request for a DNS alias (CNAME) record may fail and return the error
code KDC_ERR_S_SPRINCIPAL_UNKNowN.”
For follow up I can confirm that the kerberos connection is
established correctly. Thanks for the link as it confirms that only a
CNAME is needed as long as the SPN is created for the sql Cluster
Name.
Technically,because sql Server SPNs include an instance name (if you
are using the second-named instance on the same computer),you can
register the DNS host for the cluster as a CNAME alias and avoid the
CNAME issue described in Appendix A,Kerberos configuration kNown
issues (SharePoint Server 2010). However,if you choose to use CNAMEs,
you have to register an SPN using the DNS (A) record host name for the
CNAME aliases.
原文地址:https://www.jb51.cc/mssql/80786.html
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。