Service broker with only domain account

Question

I am new to MS Sql's service broker.

I've examined a couple of tutorials. But I could not find an answer.

I have distributed servers, but luckily all of them are under the same domain.

Is it possible to accomplish a structure without using any certificate?

Answer 1

Yes.

Do no use dialog security. Make sure all your BEGIN DIALOG statements use ENCRYPTION = OFF clause:

BEGIN DIALOG @handle
  FROM SERVICE @from_service   
  TO SERVICE @to_service
  ON CONTRACT @contract
  WITH ENCRYPTION = OFF;       

Grant SEND permission to [public] on each destinations service:

GRANT SEND ON SERVICE::<servicename> TO [public];

Use WINDOWS authentication on ENDPOINTs:

 CREATE ENDPOINT broker 
   STATE = STARTED
   AS TCP (LISTENER_PORT = 4022)
   FOR SERVICE_BROKER (AUTHENTICATION = WINDOWS);

Grant CONNECT to ENDPOINT permission to the domain account used by your SQL Service:

GRANT CONNECT ON ENDPOINT::broker TO [domain\sqlserviceaccount];  

(edited to correct GRANT SEND syntax)