Connect to SQL Server Using Windows Authentication
Connect to SQL Server Using Windows Authentication
Pulse supports connecting to Microsoft SQL Server using Windows Authentication (also known as Integrated Security), in addition to the standard SQL username/password approach. This allows the Pulse Application Server Windows service account to authenticate to SQL Server without storing credentials in Pulse.cfg.
Prerequisites
Microsoft SQL Server 2012 or later.
A dedicated Pulse database already created in SQL Server.
The Windows service account running the Pulse Application Server service must have db_owner (DBO) rights on the Pulse database.
Configuration
Step 1 — Grant SQL Server Access to the Service Account
In SQL Server Management Studio, create or identify the Windows account used to run the Pulse Application Server service.
Add this account as a SQL Server login.
Grant the account db_owner access to the Pulse database.
Step 2 — Update Pulse.cfg
Stop the Pulse Application Server service.
Open
conf/Pulse.cfgin a text editor.Configure the
[SQLServer]section with the JDBC URL but leaveUserNameandPasswordblank:
[SQLServer]
JDBCURL = localhost:1433;databaseName=Pulse;integratedSecurity=true
UserName =
Password =The integratedSecurity=true parameter instructs the JDBC driver to use the Windows service account for authentication rather than SQL credentials.
Save the file and start the Pulse Application Server service.
Step 3 — Deploy the SQL Server JDBC Authentication DLL
For Windows Authentication to work with the JDBC driver, the mssql-jdbc_auth DLL must be available on the server:
Locate the DLL from the Microsoft JDBC Driver for SQL Server package (e.g.
mssql-jdbc_auth-12.x.x.x64.dll).Place the DLL in one of the following locations:
The
binfolder of the Pulse installation directory, orA folder listed in the Windows system
PATHenvironment variable.
Restart the Pulse Application Server service.
Verifying the Connection
After restarting Pulse, check pulse.log for successful database connection messages. If Windows Authentication fails, the log will show a JDBC connection error specifying the authentication method used.
Notes
Windows Authentication only works when the Pulse Application Server service runs under a domain account — not the
LocalSystemorNetworkServicebuilt-in accounts.If the service account changes, SQL Server access must be re-granted to the new account.
The
Passwordfield inPulse.cfgshould remain blank when using Windows Authentication; Pulse will not attempt to use it.