What are the steps required in CDB to use Windows Authentication with SQL Server? |
When using “Windows Authentication” with SQL Server two components in CDB must be updated to also use “Windows Authentication”. Then to connect to the SQL Server database an ODBC Data Source using “Windows Authentication” must be created. Therefore, to configure CDB to use Windows Authentication when connecting to MS SQL Server, three components need to be configured. Step 1: Configure the CDB Services IIS “Application Pool” to run under a service account that has permissions to the MS SQL Server database. Step 2: Configure the CDB Workflow Windows NT Service to run under a service account that has permissions to the MS SQL Server database. Step 3: Create a System DSN via Automator that uses Windows Authentication to establish a connection to the MS SQL Server database. Please follow the screen shots below to perform the configuration for each step listed above: Step 1: Configure the CDB Services IIS “Application Pool” to run under a service account that has permissions to the MS SQL Server database. 1. Open “Server Manager”, click on “Tools”, and then click on “Internet Information Services (IIS) Manager”. 2. Expand the tree to the left and click on “Application Pools”. 3. Click on “BMCCDBServicesAppPool”. Then in the “Actions” panel to the right, click on “Advanced Settings…”. 4. In the “Advanced Settings” box under the “Process Model” group, select the “Identity” property and click on the […] button to the right. 5. In the “Application Pool Identity“ box, select the “Custom account” radio button, and then click the “Set…” button. 6. Very Important: In the “Set Credentials” box, enter the service account and password of a user id that has permissions to access the CDB MS SQL Server database, click OK. 7. Verify the “Custom Account”, and click OK. 8. Verify the “Identity”, and click OK. 9. Verify the “Application Pool” identity, and Stop/Start the application pool from the “Actions” panel on the right. IIS is now configured. Step 2: Configure the CDB Workflow Windows Service to run under a service account (same user account as in Step 1 above) that has permissions to the MS SQL Server database. 1. Open “Server Manager”, click on “Tools” and then click on “Services”. 2. Right click on “CDBWorkflowService”, and select “Properties”. 3. In the “CDBWorkflowService Properties” box, click the “Log On” tab, and then select the “This account” radio button. 4. Very Important: Enter the service account and password of the user that has permissions to access the CDB MS SQL Server database, click Apply. 5. The "Log On As A Service" box will be displayed. Click OK. 6. The "restart the service" box will be displayed. Click OK. 7. Click on the "General" tab and then click on the Stop button. 8. Click on the "Start" button. Click OK. 9. The “CDBWorkflowService” configuration is complete. Step 3: Create a System DSN via Automator that uses Windows Authentication to establish a connection to the MS SQL Server database. See the doc at the following link for detailed instructions on setting up SQL Server ODBC Data Source using Windows Authentication: https://bmcapps.my.salesforce.com/articles/sc_Solutions_to_a_Product_Problem/Inquira-KA391030/p |