.NET Core - 로컬 개발 중에 docker 호스팅으로 바꾸는 경우 SQL 서버 접근 방법
윈도우 환경에서 로컬에서 개발 시 "Docker Desktop"을 사용할 것입니다. 이와 함께 "Use the WSL 2 based engine" 옵션을 체크했다면 네트워크 환경이 WSL 1과는 다르므로,
WSL 2의 네트워크 통신 방법
; https://www.sysnet.pe.kr/2/0/12347
몇 가지 곤란을 겪게 됩니다. 우선, docker에서 호스트 측의 서비스를 접근하기 위해 "localhost"를 사용할 수 없습니다. 이로 인해 .NET Core 응용 프로그램을 "docker support" 없이 개발할 때는 윈도우 통합 인증으로 테스트할 수 있었던 것을,
{
...[생략]...
"ConnectionStrings": {
"BloggingDatabase": "Server=localhost;Database=Blogging;Trusted_Connection=True;"
}
}
"docker support"로 옮기는 순간부터 "localhost"로는 접속할 수 없어 이런 오류가 발생합니다.
Microsoft.Data.SqlClient.SqlException
HResult=0x80131904
Message=A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: TCP Provider, error: 40 - Could not open a connection to SQL Server)
Source=Core Microsoft SqlClient Data Provider
StackTrace:
at Microsoft.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
...[생략]...
at Microsoft.EntityFrameworkCore.Infrastructure.DatabaseFacade.EnsureCreated()
at razor_50_sample.Startup.Configure(IApplicationBuilder app, IWebHostEnvironment env) in C:\temp\razor_50_sample\Startup.cs:line 53
...[생략]...
at Microsoft.AspNetCore.Hosting.GenericWebHostService.<StartAsync>d__31.MoveNext()
This exception was originally thrown at this call stack:
Microsoft.Data.SqlClient.SqlInternalConnection.OnError(Microsoft.Data.SqlClient.SqlException, bool, System.Action<System.Action>)
...[생략]...
Microsoft.Data.ProviderBase.DbConnectionPool.CreateObject(System.Data.Common.DbConnection, Microsoft.Data.Common.DbConnectionOptions, Microsoft.Data.ProviderBase.DbConnectionInternal)
...
[Call Stack Truncated]
localhost 접속이 안 되는 문제를 해결하기 위해 단순히 Server 주소만 host.docker.internal로 바꾸면,
"BloggingDatabase": "Server=host.docker.internal;Database=Blogging;Trusted_Connection=True;"
이번에는 다음과 같은 식의 오류가 발생합니다.
Microsoft.Data.SqlClient.SqlException
HResult=0x80131904
Message=Cannot authenticate using Kerberos. Ensure Kerberos has been initialized on the client with 'kinit' and a Service Principal Name has been registered for the SQL Server to allow Kerberos authentication.
ErrorCode=InternalError, Exception=Interop+NetSecurityNative+GssApiException: GSSAPI operation failed with error - Unspecified GSS failure. Minor code may provide more information (SPNEGO cannot find mechanisms to negotiate).
at System.Net.Security.NegotiateStreamPal.GssInitSecurityContext(SafeGssContextHandle& context, SafeGssCredHandle credential, Boolean isNtlm, SafeGssNameHandle targetName, GssFlags inFlags, Byte[] buffer, Byte[]& outputBuffer, UInt32& outFlags, Int32& isNtlmUsed)
...[생략]...
at Microsoft.Data.SqlClient.TdsParser.SNISSPIData(Byte[] receivedBuff, UInt32 receivedLength, Byte[]& sendBuff, UInt32& sendLength)
Source=Core Microsoft SqlClient Data Provider
StackTrace:
at Microsoft.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
...[생략]...
at Microsoft.EntityFrameworkCore.Infrastructure.DatabaseFacade.EnsureCreated()
at razor_50_sample.Startup.Configure(IApplicationBuilder app, IWebHostEnvironment env) in C:\temp\razor_50_sample\Startup.cs:line 53
...[생략]...
at Microsoft.AspNetCore.Hosting.GenericWebHostService.<StartAsync>d__31.MoveNext()
This exception was originally thrown at this call stack:
Microsoft.Data.SqlClient.SqlInternalConnection.OnError(Microsoft.Data.SqlClient.SqlException, bool, System.Action<System.Action>)
...[생략]...
Microsoft.Data.SqlClient.SqlInternalConnectionTds.OpenLoginEnlist(Microsoft.Data.ProviderBase.TimeoutTimer, Microsoft.Data.SqlClient.SqlConnectionString, Microsoft.Data.SqlClient.SqlCredential, string, System.Security.SecureString, bool)
...
[Call Stack Truncated]
이 오류를 바로 잡으려면 윈도우 통합 인증을 사용해서는 안 되고, SQL 서버의 계정 인증 방식으로 바꿔야 합니다. 즉, 다음과 같이 연결 문자열을 바꿔야 합니다.
"BloggingDatabase": "Server=host.docker.internal;Database=Blogging;User Id=testusr; Password=...[생략]...;"
[이 글에 대해서 여러분들과 의견을 공유하고 싶습니다. 틀리거나 미흡한 부분 또는 의문 사항이 있으시면 언제든 댓글 남겨주십시오.]