Table of Contents

Search

  1. Installation Overview
  2. Before You Install the Services
  3. Service Installation
  4. After You Install the Services
  5. Client Installation
  6. Uninstallation
  7. Starting and Stopping Informatica Services
  8. Connecting to Databases from Windows
  9. Connecting to Databases from UNIX
  10. Updating the DynamicSections Parameter of a DB2 Database
  11. Installation and Configuration Checklist
  12. Split Domain Configuration for Metadata Manager

Installation and Configuration Guide

Installation and Configuration Guide

Create the Service Principal Names and Keytab Files for the Application Services

Create the Service Principal Names and Keytab Files for the Application Services

If the Informatica domain uses Kerberos authentication and you set the service principal level for the domain to process level, the domain requires an SPN and keytab file for each application service that you create in the domain. Before you enable a service, verify that an SPN and a keytab file are available for the service. Kerberos cannot authenticate the application service if the service does not have a keytab file in the Informatica directory.
The Informatica domain requires the SPNs and keytab file names in a specific format. You can use the Informatica Kerberos SPN Format Generator to generate the format of the SPN and keytab file name for the service. To save time, decide on the names of the services you want to create and the nodes on which they will run. Then run the utility to generate the SPN and keytab file name format for all the services at one time. The SPN and keytab file names are case sensitive.
You can run the Informatica Kerberos SPN Format Generator from the following directory:
<Informatica installation directory>/Tools/Kerberos
For more information about running the Informatica Kerberos SPN Format Generator, see GUID-1E2C3772-CCDA-40AC-A882-C880B3587387.
Send a request to the Kerberos administrator to add the SPNs to the principal database and to create the corresponding keytab file.
When you receive the keytab files from the Kerberos administrator, copy the files to the directory for the keytab file. By default, keytab files are stored in the following directory:
<Informatica installation directory>/isp/config/keys
. If you specified a different keytab file directory during installation, copy the files to that directory.
If the service principal for the domain is at node level, you can create and enable application services without creating additional SPNs and keytab files.