Azure Data Studio不认识Macos Monterey的Kerberos票

Question

我正在尝试连接到仅限于Windows身份验证的公司网络上的Microsoft SQL Server数据库。我已经配置了Kerberos，Kerberos确实成功发行了票，我可以验证该票证是否在售票员中有效。但是，当我尝试在Azure Data Studio中连接并选择“ Windows身份验证”时，我获得了消息“由于Kerberos错误导致连接失败”。

我的krb5.conf位于〜/etc/krb5.conf，我遵循配置指令在这里。

在连接到网络的Windows计算机上，当我运行setspn -l databasename时，我显示：

Registered ServicePrincipalNames for CN=DATABASENAME,OU=Servers,OU=Data Center,DC=companyname,DC=com:
        MSServerClusterMgmtAPI/DATABASENAME
        MSServerClusterMgmtAPI/DATABASENAME.companyname.com
        WSMAN/DATABASENAME
        WSMAN/DATABASENAME.companyname.com
        TERMSRV/DATABASENAME
        TERMSRV/DATABASENAME.companyname.com
        RestrictedKrbHost/DATABASENAME
        HOST/DATABASENAME
        RestrictedKrbHost/DATABASENAME.companyname.com
        HOST/DATABASENAME.companyname.com

当我运行nslookup -type = srv _kerberos.__tcp.companyname.com我显示：

Server:  UnKnown
Address:  xx.x.x.163
Non-authoritative answer:
_kerberos._tcp.companyname.com SRV service location:
          priority       = 0
          weight         = 100
          port           = 88
          svr hostname   = dcname01.companyname.com
_kerberos._tcp.companyname.com SRV service location:
          priority       = 0
          weight         = 100
          port           = 88
          svr hostname   = dcname02.companyname.com
_kerberos._tcp.companyname.com SRV service location:
          priority       = 0
          weight         = 100
          port           = 88
          svr hostname   = dcname03.companyname.com
_kerberos._tcp.companyname.com SRV service location:
          priority       = 0
          weight         = 100
          port           = 88
          svr hostname   = dcname04.companyname.com
dcname01.comapnyname.com        internet address = xx.x.x.47
dcname02.companyname.com        internet address = xx.x.x.8
dcname03.companyname.com        internet address = xx.xx.x.11
dcname04.companyname.com        internet address = xx.xx.x.10

我配置了我的krb5.conf文件的方式是：

[libdefaults]
 default_realm = COMPANYNAME.COM

[realms]
COMPANYNAME.COM = {
 kdc = dcname01.companyname.com
 kdc = dcname02.companyname.com
 kdc = dcname03.companyname.com
 kdc = dcname04.companyname.com
}

我尝试了许多不同的krb5.conf配置，涉及以不同格式包含和省略不同的k/v对，但我尝试过的任何事情都没有使用。我还试图通过Homebrew重新安装KRB5。

我正在MacOS 12.3.1上使用Intel Mac。

什么会导致Azure Data Studio不承认我的Kerberos门票？

Answer 1

您需要添加主机文件服务器IP地址和服务器的全名（带有exmaple的域“ sqlserver.yourdomain.com”）