Enable Integrated Security for JDBC Data Sources
Two JDBC drivers (JTDS and MS SQL Driver) support Integrated Security with MS SQL Server.
To enable Integrated Security in a data source/agent, you must perform additional tasks beyond the standard configuration steps.
Set up the Data Agent Service with Integrated Security
- WithinIntegration > Design Integrations, unprovision any agents from the host PC.
- Stop the Data Agent service.
- Reconfigure the windows service to run as the Windows account that has network/ db credentials.Example Adaptive Data Agent Service 64 bit Properties (Local Computer)
- Log Ontab settings:
- This account:yourcompanydomain\yourusername
- Install the required DLLs.TheFor either JTDS or JDBCsqljdbc_auth.dllfile installs as part of the data agent installer for agents V5.1.17.8415 and newer intoC:\Program Files\Workday Adaptive Planning Data Agent\lib\mssqljdbc\x64.For agents older than V5.1.17.8415, you must manually installsqljdbc_auth.dll. Thesqljdbc_auth.dllfile is available from Microsoft download https://www.microsoft.com/en-US/download/details.aspx?id=11774For JTDSPlace thesqljdbc_auth.dllfile somewhere in thePATH, such asC:\Windows\System32.For any Agent version, you must manually install thentlmauth.dll.The requiredntlmauth.dllfor a JTDS jdbc driver (either x32 or x64 version depending on the JVM in use) should be placed inC:\Program Files\Workday Adaptive Planning Data Agent\lib\mssqljdbc\x64\(for 64 bit JVM).For data agent versions 7.1.44 and older,C:\Program Files\Adaptive Data Agent\lib\mssqljdbc\x64\(for 64 bit JVM)orC:\Program Files\Workday Adaptive Planning Data Agent\lib\mssqljdbc\x86\(For 32 bit JVM).Thentlmauth.dllfile is available from a JTDS download location:
- https://sourceforge.net/projects/jtds/files/jtds/1.2.5/ for jtds 1.2.5
- https://sourceforge.net/projects/jtds/files/jtds/1.2.8/ for jtds 1.2.8
- http://sourceforge.net/projects/jtds/files/ for jtds 1.3.1
For JDBCThe JDBC driver requiressqljdbc_auth.dll.Manually place thesqljdbc_auth.dllin the<java>\jre\binfolder. The<java>directory must be the same as the one used when the Agent was installed.You can verify exactly what directory to use by examining the agent config fileC:\Program Files\Workday Adaptive Planning Data Agent\ AgentService64.ini. Find"JRE Path"under [Java Runtime Environment] within this file. Copysqljdbc_auth.dllinto the directory listed forJRE Path. - Re-start the Data Agent service.
- Re-provision the agent.SelectProvision a New Agentin the Data Agent Service Manager.
Creating a JDBC Data Source
When you create a JDBC data source using the
Create New Data Source
menu, make sure to include the integratedSecurity=true
in the JDBC url.- For the MS SQL driver:
- Driver class:com.microsoft.sqlserver.jdbc.SQLServerDriverJdbc url:jdbc:sqlserver://<server>:<port>;integratedSecurity=trueExample:jdbc:sqlserver://dev-gp2013-r2:1433;integratedSecurity=trueUser name:keep it empty.Password:keep it empty.
- For the JTDS driver:
- Driver class:net.sourceforge.jtds.jdbc.DriverJdbc url:jdbc:jtds:sqlserver://<server>:<port>;integratedSecurity=true;domain=<domain name>Example:jdbc:jtds:sqlserver://DEV-GP2013-R2:1433;integratedSecurity=true;domain=ADAPTIVEUser name:keep it empty.Password:keep it empty.