Table of Contents

Search

  1. Installation Overview
  2. Before You Install the Services
  3. Service Installation
  4. After You Install the Services
  5. Client Installation
  6. Uninstallation
  7. Starting and Stopping Informatica Services
  8. Connecting to Databases from Windows
  9. Connecting to Databases from UNIX
  10. Updating the DynamicSections Parameter of a DB2 Database
  11. Installation and Configuration Checklist
  12. Split Domain Configuration for Metadata Manager

Installation and Configuration Guide

Installation and Configuration Guide

Running the Informatica Kerberos SPN Format Generator on Windows

Running the Informatica Kerberos SPN Format Generator on Windows

You can run the Informatica Kerberos SPN Format Generator to generate a file that shows the correct format for the SPNs and keytab file names required in the Informatica domain.
You can run the SPN Format Generator from the command line or from the Informatica installer. The SPN Format Generator generates a file with the names of the service principal and keytab files based on the parameters you provide.
Verify that the information you provide is correct. The SPN Format Generator does not validate the values you enter.
To run the SPN Format Generator, perform the following steps:
  1. Log in to the machine with a system user account.
  2. Close all other applications.
  3. Go to the root of the directory that contains the installation files and run install.bat as administrator.
  4. Select
    Install Informatica 10.2
    .
  5. Select
    Run the Informatoica Kerberos SPN Format Generator
    to generate the Kerberos service principal names and keytab file names in the informatica format. This image describes about the Informativa kerberos SPN format generator.
  6. Cick
    Start
    .
    The Informatica Kerberos SPN Format Generator
    Welcome
    page appears. This image describes about the copyright and patents information.
  7. Click
    Next
    .
    The
    Service Principal Level
    page appears. This image describes about the level you can set for the kerberos service pricipal in the domain.
  8. Select the level at which to set the Kerberos service principals for the domain.
    The following table describes the levels you can select:
    Level
    Description
    Process Level
    Configures the domain to use a unique service principal name (SPN) and keytab file for each node and each application service on a node.
    The number of SPNs and keytab files required for each node depends on the number of application service processes that run on the node. Use the process level option for domains that require a high level of security, such as productions domains.
    Node Level
    Configures the domain to share SPNs and keytab files on a node.
    This option requires one SPN and keytab file for the node and all application services that run on the node. It also requires a separate SPN and keytab file for all HTTP processes on the node.
    Use the node level option for domains that do not require a high level of security, such as test and development domains.
  9. Click
    Next
    .
    The
    Authentication Parameters - Kerberos Authentication
    page appears. The image describes about the domain paramters that you can enter for kerberos authentcation.
  10. Enter the domain and node parameters to generate the SPN format.
    The following table describes the parameters you must specify:
    Prompt
    Description
    Domain Name
    Name of the domain. The name must not exceed 128 characters and must be 7-bit ASCII only. It cannot contain a space or any of the following characters: ` % * + ; " ? , < > \ /
    Node name
    Name of the Informatica node.
    Node host name
    Fully qualified host name or the IP address of the machine on which to create the node. The node host name cannot contain the underscore (_) character.
    Do not use
    localhost
    . The host name must explicitly identify the machine.
    Service Realm Name
    Name of the Kerberos realm for the Informatica domain services. The realm name must be in uppercase.
    If you set the service principal at node level, the utility displays the
    +Node
    button. If you set the service principal at process level, the utility displays the
    +Node
    and
    +Service
    buttons. This image describes about the domain parameters that you can enter at the principal level to authenticate kerberos..
  11. To generate the SPN format for an additional node, click
    +Node
    and specify the node name and host name.
    You can enter multiple nodes for a domain.
  12. To generate the SPN format for a service, click
    +Service
    and specify the service name in the
    Service On Node
    field.
    The
    Service On Node
    field displays only if you set the service principal at process level and you click
    +Service
    . You can enter multiple services for a node. The services appear immediately below the node that they run on.
  13. To remove a node from the list, click
    -Node
    .
    The Informatica SPN Format Generator deletes the node. If you have added services to the node, the services are deleted with the node.
  14. To remove a service from a node, clear the service name field.
  15. Click
    Next
    .
    The SPN Format Generator displays the path and file name of the file that contains the list of service principal and keytab file names.
  16. Click
    Done
    to exit the SPN Format Generator.
The SPN Format Generator generates a text file that contains the SPN and keytab file names in the format required for the Informatica domain.