Installation for Data Engineering

10.5.4
- 10.5.9
- 10.5.8
- 10.5.7
- 10.5.6
- 10.5.5.1
- 10.5.5
- 10.5.3
- 10.5.2
- 10.5.1
- 10.5
- 10.4.1
- 10.4.0
- 10.2.2 HotFix 1
- 10.2.2 Service Pack 1
- 10.2.2
- 10.2.1

Back Next

Set Up the Kerberos Configuration File

Kerberos stores configuration information in a file named krb5.conf. Informatica requires specific properties set in the Kerberos configuration file so that the Informatica domain can use Kerberos authentication correctly. You must set the properties in the krb5.conf configuration file.

The configuration file contains the information about the Kerberos server, including the Kerberos realm and the address of the KDC. You can request the Kerberos administrator to set the properties in the configuration file and send you a copy of the file.

Back up the krb5.conf file before you make any changes.

Edit the krb5.conf file.

In the libdefaults section, set or add the properties required by Informatica.

The following table lists the values to which you must set properties In the libdefaults section:

Parameter	Value
default_realm	Name of the service realm for the Informatica domain. If you are integrating the domain with a non-native environment, set the default_realm property to be the same as the default_realm property of the cluster.
forwardable	Allows a service to delegate client user credentials to another service. Set this parameter to True. The Informatica domain requires application services to authenticate the client user credentials with other services.
default_tkt_enctypes	Encryption types for the session key in ticket-granting tickets (TGT). Set this parameter only if session keys must use specific encryption types.
udp_preference_limit	Determines the protocol that Kerberos uses when it sends a message to the KDC. Set udp_preference_limit = 1 to always use TCP. The Informatica domain supports only the TCP protocol. If the udp_preference_limit is set to any other value, the Informatica domain might shut down unexpectedly.

In the realms section, include the port number in the address of the KDC separated by a colon.

For example, if the KDC address is kerberos.example.com and the port number is 88, set the kdc parameter to the following:

kdc = kerberos.example.com:88

Save the krb5.conf file.

Store the krb5.conf file in a directory that is accessible to the machine where you plan to install the Informatica services.

The following example shows the content of a krb5.conf with the required properties:

[libdefaults]
default_realm = AFNIKRB.AFNIDEV.COM
forwardable = true
udp_preference_limit = 1

[realms]
AFNIKRB.AFNIDEV.COM = {
  admin_server = SMPLKERDC01.AFNIKRB.AFNIDEV.COM
  kdc = SMPLKERDC01.AFNIKRB.AFNIDEV.COM:88
 }

[domain_realm]
afnikrb.afnidev.com = AFNIKRB.AFNIDEV.COM
.afnikrb.afnidev.com = AFNIKRB.AFNIDEV.COM

For more information about the Kerberos configuration file, see the Kerberos network authentication documentation.

Rename Saved Search

Table of Contents

Installation for Data Engineering

Installation for Data Engineering

Set Up the Kerberos Configuration File

Set Up the Kerberos Configuration File