Java application loses it's identity when going through linked servers

Question

Hi,

I periosically have users complaining to me that they are getting the following error message back when running a stored procedure from Matlab, whereas it works fine in SSMS.

'NT AUTHORITY\ANONYMOUS LOGON'.

I believe this to be an issue between the java application and SQL server, both of which are running on windows,. I believe that the Kerberos ticket is being lost. It seesm to happen most frequently when the stored procedure calls another stored procedure on a remote server which in turn calls a stored procedure back on the original server.

I've generally got round this by advising the user to rewrite the stored procedures, however I would like to resolve the u8nderlying problem as it is causing repeat problems.

I've considered making the linked servers all work using a remote login, however that compromises our security arramgement and would mean considerable work.

Does anyone have any suggestions,

thanks

---

Sean

Answer 1

Sean,

This looks like "double hop delegation issue". Can you take a look at the below if you haven't already. 

Configuring Linked Servers for Delegation

SQL Linked Server Query failed with “Login failed for user …”

---

Sankar Reddy

Blog: http://SankarReddy.com/
Twitter: http://twitter.com/SankarReddy13/

Answer 2

Hi,

the linked articles were very interesting thanks, however I've checked all of these settings, and everything seems to be set up ok.

Also the user is able to run the query using SSMS from their machine, the problem only appears when they use the matlab application from their machine to run the same query. So it seems to be a problem specific to the use of Matlab, which uses the java database connection. I will continue to try and track down the problem.

---

Sean