To connect using SSPI

1. Start the SQL Anywhere server with the -krb option to enable Kerberos authentication.

   dbeng11 -krb -n my_server_princ C:\kerberos.db

2. Change the public or temporary public option login_mode to a value that includes Kerberos. You must have DBA authority to set this option.

   SET OPTION PUBLIC.login_mode = 'Kerberos';

3. Create a database user ID for the client. You can use an existing database user ID for the Kerberos login, as long as that user has the correct permissions.

   CREATE USER kerberos_user IDENTIFIED BY abc123;

4. Create a mapping from the client's Kerberos principal to an existing database user ID by executing a GRANT KERBEROS LOGIN TO statement. This statement requires DBA authority.

   GRANT KERBEROS LOGIN TO "pchin@MYREALM.COM" AS USER "kerberos-user";

5. Connect to the database from the client computer.

   dbisql -c "KERBEROS=SSPI;ENG=my_server_princ"

   A connection attempt using the following Interactive SQL statement will also succeed, providing the user has logged on with a user profile name that matches a Kerberos login mapping in a default database of a server:

   CONNECT USING 'KERBEROS=SSPI';