Skip to content

Commit 960d7de

Browse files
Dylan-MSFTDylan-MSFT
committed
Addressed comments from Jason
1 parent f97ea2c commit 960d7de

3 files changed

Lines changed: 15 additions & 40 deletions

File tree

‎docs/linux/sql-server-linux-active-directory-authentication.md‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -29,9 +29,9 @@ This tutorial consists of the following tasks:
2929
> * Create AD-based logins in Transact-SQL
3030
> * Connect to [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] using AD Authentication
3131
32-
> Note
32+
> [!NOTE]
3333
>
34-
> If you wish to configure [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] on Linux to use a third party AD provider, please see [Use Active Directory Authentication with SQL Server on Linux through Third Party AD Providers](./sql-server-linux-active-directory-third-party-providers.md).
34+
> If you wish to configure [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] on Linux to use a third-party AD provider, please see [Use third-party Active Directory providers with SQL Server on Linux](./sql-server-linux-active-directory-third-party-providers.md).
3535
3636
## Prerequisites
3737

@@ -340,12 +340,12 @@ The specific connection string parameter for clients to use AD Authentication de
340340
* ADO.NET: [Connection String Syntax](https://msdn.microsoft.com/library/system.data.sqlclient.sqlauthenticationmethod(v=vs.110).aspx)
341341

342342
## Performance Improvements
343-
If you notice that AD account lookups are taking a while, and you have checked you AD configuration is valid with the steps at [Use Active Directory Authentication with SQL Server on Linux through Third Party AD Providers](sql-server-linux-active-directory-third-party-providers.md), you can add the lines below to `/var/opt/mssql/mssql.conf` to skip SSSD calls and directly use LDAP calls.
343+
If you notice that AD account lookups are taking a while, and you have checked you AD configuration is valid with the steps at [Use Active Directory Authentication with SQL Server on Linux through Third-Party AD Providers](sql-server-linux-active-directory-third-party-providers.md), you can add the lines below to `/var/opt/mssql/mssql.conf` to skip SSSD calls and directly use LDAP calls.
344344

345-
```/var/opt/mssql/mssql.conf
346-
[network]
347-
disablesssd = true
348-
```
345+
```/var/opt/mssql/mssql.conf
346+
[network]
347+
disablesssd = true
348+
```
349349

350350
## Next steps
351351

‎docs/linux/sql-server-linux-active-directory-third-party-providers.md‎

Lines changed: 6 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Third-Party AD Providers | Microsoft Docs
2+
title: Use third-party Active Directory providers with SQL Server on Linux | Microsoft Docs
33
description: This tutorial provides the configuration steps for AD Authentication with third-party providers
44
author: dylan-MSFT
55
ms.date: 07/25/2018
@@ -14,31 +14,17 @@ ms.technology: linux
1414
helpviewer_keywords:
1515
- "Linux, AD authentication"
1616
---
17-
# Tutorial: Use Active Directory Authentication with SQL Server on Linux through Third-Party AD Providers
17+
# Use third-party Active Directory providers with SQL Server on Linux
1818

1919
[!INCLUDE[appliesto-ss-xxxx-xxxx-xxx-md-linuxonly](../includes/appliesto-ss-xxxx-xxxx-xxx-md-linuxonly.md)]
2020

21-
This tutorial explains how to configure a [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] on Linux host machine with AD Authentication when using third-party AD providers, such as [PowerBroker Identity Services (PBIS)](https://www.beyondtrust.com/), [Vintela Authentication Services (VAS)](https://www.oneidentity.com/products/authentication-services/), and [Centrify](https://www.centrify.com/). This guide includes steps to check your AD configuration, and it is not intended to instruct on how to join a machine to a domain. For detailed instructions on joining a [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] host to a domain using REALM and SSSD, see [Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md).
22-
23-
To set up AD Authentication with [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] on Linux, you need to do the following steps:
24-
25-
> [!div class="checklist"]
26-
> * Join [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] host to an AD domain
27-
> * Check configuration is compatible for AD Authentication
28-
> * Create AD user for SQL Server and set SPN
29-
> * Configure SQL Server service keytab
30-
> * Create AD-based logins in Trasact-SQL
31-
> * Connect to SQL Server using AD Authentication
32-
33-
In this tutorial, we will cover the second step listed above. For help with joining the [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] host to an AD domain with SSSD, look at [Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md). Alternatively, you can use a third-party AD provider to join the AD domain, such as [PBIS](https://www.beyondtrust.com/), [VAS](https://www.oneidentity.com/products/authentication-services/), or [Centrify](https://www.centrify.com/).
34-
35-
For help with steps 3-6, follow the steps at [Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md).
21+
This article explains how to configure a [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] on Linux host machine with AD Authentication when using third-party AD providers, such as [PowerBroker Identity Services (PBIS)](https://www.beyondtrust.com/), [Vintela Authentication Services (VAS)](https://www.oneidentity.com/products/authentication-services/), and [Centrify](https://www.centrify.com/). This guide includes steps to check your AD configuration, and it is not intended to instruct on how to join a machine to a domain. For detailed instructions on joining a [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] host to a domain using REALM and SSSD, see [Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md).
3622

3723
## Prerequisites
3824

3925
Before you configure AD Authentication, you need to set up an AD Domain Controller (Windows) on your network and join your [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] on Linux host to an AD domain. You can use [PBIS](https://www.beyondtrust.com/), [VAS](https://www.oneidentity.com/products/authentication-services/), or [Centrify](https://www.centrify.com/).
4026

41-
>NOTE
27+
> [!NOTE]
4228
>
4329
>This tutorial uses "contoso.com" and "CONTOSO.COM" as example domain and realm names respectively. It also uses "DC1.CONTOSO.COM" as the example fully qualified domain name of the domain controller. You should replace these with your own values.
4430
@@ -165,22 +151,12 @@ Check your `/etc/krb5.conf` is configured correctly. For most third-party AD pro
165151

166152
## Next steps
167153

168-
To set up AD Authentication with [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] on Linux, you need to do the following steps:
169-
170-
> [!div class="checklist"]
171-
> * Join [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] host to an AD domain
172-
> * Check configuration is compatible for AD Authentication
173-
> * Create AD user for SQL Server and set SPN
174-
> * Configure SQL Server service keytab
175-
> * Create AD-based logins in Trasact-SQL
176-
> * Connect to SQL Server using AD Authentication
177-
178-
In this tutorial, we covered step #2. For help with steps #3-6, follow the instructions at [Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md).
154+
In this article, we covered how to configure a [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] on Linux host machine with AD Authentication when using third-party AD providers. To finish configuring [!INCLUDE[ssNoVersion](../includes/ssnoversion-md.md)] on Linux to support AD accounts, follow the instructions at [Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md).
179155

180156
> [!div class="nextstepaction"]
181157
> [Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md)
182158
183-
> NOTE
159+
> [!NOTE]
184160
>
185161
> You can skip the "Join SQL Server host to AD domain" section in [Use Active Directory authentication with SQL Server on Linux](sql-server-linux-active-directory-authentication.md)
186162
as you have just done that in this tutorial.

‎docs/linux/toc.yml‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -38,9 +38,6 @@
3838
href: sql-server-linux-run-sql-server-agent-job.md
3939
- name: 5_Setup AD Authentication
4040
href: sql-server-linux-active-directory-authentication.md
41-
items:
42-
- name: Third Party AD Auth
43-
href: sql-server-linux-active-directory-third-party-providers.md
4441
- name: 6_Create failover cluster instance
4542
href: sql-server-linux-shared-disk-cluster-configure.md
4643
items:
@@ -178,6 +175,8 @@
178175
href: sql-server-linux-active-directory-auth-overview.md
179176
- name: Encrypting connections
180177
href: sql-server-linux-encrypted-connections.md
178+
- name: Third Party AD Auth
179+
href: sql-server-linux-active-directory-third-party-providers.md
181180
- name: Performance
182181
items:
183182
- name: Best practices

0 commit comments

Comments
 (0)