If you want to enable Kerberos for the cluster, verify the following prerequisites:
Verify that you install the following prerequisite packages before you enable Kerberos:
krb5-workstation
krb5-libs
If you want to collect the log files in a common location, create the
service-logs
directory under
/Informatica/LDM/<service cluster name>/
and assign the ownership of the directory to the service cluster user if the cluster is enabled for Kerberos.
If the cluster is not enabled for Kerberos, create the
service-logs
directory under
/Informatica/LDM/<service cluster name>/
and assign the ownership of the directory to the domain user.
If the cluster is not enabled for Kerberos. create the directory
<domain user name>
under
/user
and assign the ownership of directory to the domain user.
If the cluster is enabled for Kerberos, create the directory
<service cluster name>
under
/user
and assign the ownership of the directory to the service cluster user. If the cluster is not enabled for Kerberos, the assign the ownership of the directory to the domain user.
If you want to enable Kerberos authentication for Enterprise Data Catalog deployed on a multi-node Informatica domain, make sure that you complete the following prerequisites:
Make sure that all the domain nodes include the
krb5.conf
file in the following directories:
$INFA_HOME/services/shared/security/
/etc/
Make sure that the
/etc/hosts
file of all cluster nodes and domain nodes include the krb hosts entry and a host entry for other nodes.
Install
krb5-workstation
in all domain nodes.
Make sure that the keytab file is present in a common location on all domain nodes.
Make sure that the service cluster user is configured on all cluster nodes.
