mORMot Open Source

DigDiver

Member

Registered: 2013-04-29

Posts: 137

Kerberos authentication

Hello to all

I have the same troubles with Kerberos authentication.
In the organization we have one Windows 2012 server server-pc12 and 2 client computers alex-pc and boss-pc
The server and client computers are in the same domain GLOCK.local
The mORMot service application is installed on the server-pc12 and SPN has been registered properly on the server. MyServer/server-pc12.GLOCK.local
In mORMot service application I have 3 users (1. GLOCK/Alex; 2. GLOCK/Admin; 3. GLOCK/Boss)
Windows server also have these users.

When the client from alex-pc computer logs in to the server MyClient.SetUser('','MyServer/server-pc12.GLOCK.local'), he is logged in as GLOCK/Admin, not as GLOCK/Alex.

From the log:

TSQLRestServerAuthenticationSSPI(01C6FBE0) NTLM Authentication success for GLOCK\admin

What are the correct settings to make the clients from different computers being logged in under their User Names?

Chaa

Member

Registered: 2011-03-26

Posts: 244

Re: Kerberos authentication

First, try to configure application so that everything worked with NTLM. We add Kerberos on next step.

MyClient.SetUser('','');

If GLOCK\Admin is logged on alex-pc, and run client application, then it authenticates as GLOCK\Admin in mormot service.
If GLOCK\Alex is logged on alex-pc, and run client application, then it authenticates as GLOCK\Alex in mormot service.

What are the correct settings to make the clients from different computers being logged in under their User Names?

Verify in Windows Task Manager which user runs client app.