Hi!
I am trying to run web api application connecting to database with kerberos authenticated user which is actually windows group managed account (gmsa). I mean app is running under gmsa.
I got it up and running, but in the process i had to overcome multiple issues that I would like to understand better.
- When started to work on this I was getting error that kerberos config file is not found. Setting sqlnet.kerberos5_conf did not help. So, multiple steps were taken to resolve this. Namely, machine level KRB5_CONFIG environment variable was set. Assuming that MIT binaries need this. This still did not helped. Then app pool was configured to load user profile and after this error gone. I assume value from config file supposed to override machine environment, but i have to have both pointing to the same location! If i comment setting in config file I am getting error that it is not found. This does not make a lot of
- I do not know why but we were getting error about loading IOC dll. We put both versions in bin and it started working somehow. I am not sure why we need 32-bit version when app is running in 64-bit pool. Error message is quite generic, would be nice to have some information what dependency load actually failed.
So, i would like understand how manageddataaccess loads kerberos configuration values and what is set of absolutely required variables