Security Guide

10.2.1
- 10.5.6
- 10.5.5
- 10.5.4
- 10.5.3
- 10.5.2
- 10.5.1
- 10.5
- 10.4.1
- 10.4.0
- 10.2.2 HotFix 1
- 10.2.2

Back Next

Step 2. Update the Nodes in the Domain

Update all gateway and worker nodes with the Kerberos authentication server information except the gateway nodes on which you ran the infasetup switchToKerberosMode command.

Use the following commands to update the gateway and worker nodes:

infasetup UpdateGatewayNode: Use the UpdateGatewayNode command to set the Kerberos authentication parameters on a gateway node in the domain. If the domain has multiple gateway nodes, run the UpdateGatewayNode command on each gateway node.
infasetup UpdateWorkerNode: Use the UpdateWorkerNode command to set the Kerberos authentication parameters on a worker node in the domain. If the domain has multiple worker nodes, run the UpdateWorkerNode command on each worker node.

At the command prompt on a node, switch to the directory where the infasetup executable is located:

<Informatica installation directory>\isp\bin

To set the Kerberos authentication parameters on a gateway node, run the following command:

infasetup UpdateGatewayNode -krb <true|false> -srn <Kerberos realm name> -urn <Kerberos realm name>

To set the Kerberos authentication parameters on a worker node, run the following command:

infasetup UpdateWorkerNode -krb <true|false> -srn <Kerberos realm name> -urn <Kerberos realm name>

The following table describes the options and arguments required to enable Kerberos authentication on a node:

Option	Argument	Description
-EnableKerberos -krb	true\|false	Configures the Informatica domain to use Kerberos authentication. Set to true to enable Kerberos authentication. Default is false.
-ServiceRealmName -srn	Kerberos_realm_name	Name of the Kerberos realm specified in the Kerberos configuration file. The realm name must be in uppercase and is case-sensitive. The service realm name and the user realm name must be the same.
-UserRealmName -urn	Kerberos_realm_name	Name of the Kerberos realm specified in the Kerberos configuration file. The service realm name and the user realm name must be the same.

The following example updates a worker node to use Kerberos authentication:

infasetup updateWorkerNode -krb true -srn EXAMPLE.COM -urn EXAMPLE.COM

Rename Saved Search

Table of Contents

Security Guide

Security Guide

Step 2. Update the Nodes in the Domain

Step 2. Update the Nodes in the Domain