Groups | Blog | Home
all groups > sql server replication > november 2006 >

sql server replication : SQL 2005 Replication between 2 non trusted domains.


Andy McDonald
11/28/2006 6:39:02 AM
Hello.

Let me paint the picture :-)

I am a Windows Engineer and I have been asked to create a trust between two
domains, this request has come from our SQL engineers who tells me this is
required to set up SQL Replication.

Basically there are 2 servers both having SQL 2005 installed on them, but
the servers are in different domains. We need to set up replicaiton between
them, I have found this article, but its for SQL 2000 and the SQL Engineer is
telling me it can not be done on SQL 2005 without first creating a trust
between the two domains. Im not saying I dont believe him, BUT I dont believe
him.

http://support.microsoft.com/kb/321822

If anyone has any instructions or documentation on this subject, I would be
most grateful.

Thanks in advance

Andy McDonald
11/28/2006 7:15:02 AM
Thanks for this.

I have asked the SQl Engineer if this has helped.

He responded :-

pass through doesn't work. it's down to the domain being passed . I can
manually connect to the share, but SQL cann't as it's passing the domain name
as well as the user name.

I suggested it may be the lmcompatability level being different on the 2
servers, but I am told he has checked this.

Any other help would be much appreciated.

Andy


[quoted text, click to view]
Andy McDonald
11/28/2006 8:28:02 AM
Hilary.

may be a slight problem there, each installation of SQL is actually a
clustered installation and therefore the accounts used may be a domain
account.

I will check and get back to you.

Thanks foryour help on this.

[quoted text, click to view]
Hilary Cotter
11/28/2006 9:58:33 AM
Not true. Use pass-through authentication. Create the same accounts on all
domains with the same passwords. Use this as the account the agents run
under or the account you are running your merge or distribution agent under.
Note that you can use SQL authentication for this.

If you are using pull subscribers the account the agent will run under needs
read and list file and folder rights to the snapshot share. If its pull this
will not be a concern.

Sounds like your SQL DBAs are as confused as you are.

--
Hilary Cotter

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com



[quoted text, click to view]

Hilary Cotter
11/28/2006 11:01:23 AM
It works for me. The trick is not to pass the domain name. So if your
domain name is domain1, and your account name is account1, use account1 not
domain1\account1.

--
Hilary Cotter

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com



[quoted text, click to view]

Hilary Cotter
11/28/2006 11:04:55 AM
BTW- make sure you are using local machine accounts not domain accounts for
this to work.

--
Hilary Cotter

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com



[quoted text, click to view]

Hilary Cotter
11/28/2006 2:19:55 PM
Is this push or pull? With Push all authentication is done locally on the
publisher for the snapshot. The distribution agent can connect to the
subscriber using a sql account.

--
Hilary Cotter

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com



[quoted text, click to view]

AddThis Social Bookmark Button