Using SSPI for Kerberos logins on Windows

In a Windows domain, SSPI can be used on Windows-based computers without a Kerberos client installed on the client computer. Windows domain accounts already have associated Kerberos principals.

Prerequisites

You must already have Kerberos configured before SAP Sybase IQ can use it. You must already have your SAP Sybase IQ database server and database configured to use Kerberos.

Task

SSPI can only be used by SAP Sybase IQ clients in the Kerberos connection parameter. SAP Sybase IQ database servers cannot use SSPI—they need a supported Kerberos client other than SSPI.

Connect to the database from the client computer. For example:
dbisql -c "KERBEROS=SSPI;Server=my_server_princ"

When Kerberos=SSPI is specified in the connection string, a Kerberos login is attempted.

A connection attempt using the following SQL statement also succeeds, providing the user has logged on with a user profile name that matches a Kerberos login mapping for the default database on a database server:

CONNECT USING 'KERBEROS=SSPI';

You can use SSPI for Kerberos authentication on Windows.