ITPAM database operator- Windows authentication issue

[Anon Anon]

I was trying to run a MSSQL query using windows authentication by appending "integratedSecurity=true" in connection url and keeping username and password field empty as per documentation but was getting error "Could not connect to the database; " 

did anyone know how to solve this...??

[Anon Anon]

The userid that PAM service is running under needs to be an account that can sign into the database.  We had to change the userid PAM service was running under.

[Pier Olivier Tremblay]

Integrated security means that the query will be executed with the account running the service who try to execute it, in your case, PAM's account. (this is not always true but in your case it is).

 

If you always connect to the same sql instance, let me suggest to configure it in the module section of the configuration of your domain.

 

If not, you can remove the ;integratedSecurity=true from your connection string, and provide the username and password in the corresponding field of your operator.

 

Alternatively, you can specify the username and password in the connection string, but I'm not sure if PAM support this one, didn't try it.

: Server=myServerAddress;Database=myDataBase;User Id=myUsername;Password=myPassword;

 

 

 

PS : If you try to connect to a different DataBase system that the one PAM is installed on, you will need to deploy the corresponding driver, take a look at the installation guide for assistance. But if you we're trying too, you should have get an error saying : unable to load driver for XXXX.

 

Good luck

 

 

[Pier Olivier Tremblay]

Oh, almost forgot. As per bemerson said, you can grant read access to PAM account into your database, but i would not recommend it. Create a specific account for it.

 

Same thing if you access several databases on the same instance, use a different account for each database.

 

This way you avoid having someone who knows the password of the service account giving access to every database in your instance.