Table of Contents

Search

  1. About the Security Guide
  2. Introduction to Informatica Security
  3. User Authentication
  4. LDAP Security Domains
  5. Kerberos Authentication Setup
  6. Domain Security
  7. Security Management in Informatica Administrator
  8. Users and Groups
  9. Privileges and Roles
  10. Permissions
  11. Audit Reports
  12. Command Line Privileges and Permissions
  13. Custom Roles

Step 8. Update the Nodes in the Domain

Step 8. Update the Nodes in the Domain

Run the infasetup command to update all other nodes in the domain with the Kerberos authentication server information.
Update all gateway and worker nodes with the Kerberos authentication server information except the gateway node on which you ran the switchToKerberosMode command.
To update the gateway and worker nodes, use the following commands:
infasetup UpdateGatewayNode
Use the UpdateGatewayNode command to set the Kerberos authentication parameters on a gateway node in the domain. If the domain has multiple gateway nodes, run the UpdateGatewayNode command on each gateway node.
infasetup UpdateWorkerNode
Use the UpdateWorkerNode command to set the Kerberos authentication parameters on a worker node in the domain. If the domain has multiple worker nodes, run the UpdateWorkerNode command on each worker node.
  1. On a machine that hosts an Informatica node, run the infasetup command to update the node.
    At the command prompt, go to the directory where the Informatica command line programs are located. By default, the command line programs are installed in the following directory:
    <InformaticaInstallationDir>/isp/bin
  2. Run infasetup with the required options and arguments.
    Enter the following command:
    • Windows:
      infasetup UpdateGatewayNode
      or
      infasetup UpdateWorkerNode
    • UNIX:
      infasetup.sh UpdateGatewayNode
      or
      infasetup.sh UpdateWorkerNode
    The following table describes the options to update the Kerberos authentication information for a node:
    Option
    Argument
    Description
    -EnableKerberos
    -krb
    enable_kerberos
    Configures the Informatica domain to use Kerberos authentication.
    -ServiceRealmName
    -srn
    realm _name_of_node_spn
    Name of the Kerberos realm to which the Informatica domain services belong. The realm name must be in uppercase and is case-sensitive.
    The service realm name and the user realm name must be the same.
    -UserRealmName
    -urn
    realm _name_of_user_spn
    Name of the Kerberos realm to which the Informatica domain users belong. The realm name must be in uppercase and is case-sensitive.
    The service realm name and the user realm name must be the same.


Updated April 29, 2019