Installation for PowerCenter and Data Quality

10.5.2
- 10.5.6
- 10.5.5.1
- 10.5.5
- 10.5.4
- 10.5.3
- 10.5.1
- 10.5
- 10.4.1
- 10.4.0

Back Next

Network Security - Kerberos Authentication

After you configure the security level, you can configure Keberos authentication.

The

Network Security - Kerberos Authentication

page, enter the domain and keytab information required for Kerberos authentication.

The following table describes the Informatica domain and node information that you must provide:

Property	Description
Domain name	Name of the domain to create. The name must not exceed 128 characters and must be 7-bit ASCII only. The name cannot contain a space or any of the following characters: ` % * + ; " ? , < > \ /
Node name	Name of the node to create.
Node host name	Fully qualified host name or IP address of the machine on which to create the node. The node host name cannot contain the underscore (_) character. Do not use localhost. The host name must explicitly identify the machine.

The following table describes the Kerberos realm and keytab information that you must provide:

Property	Description
Service realm name	Name of the Kerberos realm that the domain uses to authenticate users. The realm name must be in uppercase and is case-sensitive. To configure Kerberos cross realm authentication, specify the name of each Kerberos realm that the domain uses to authenticate users, separated by a comma. For example: COMPANY.COM,EAST.COMPANY.COM,WEST.COMPANY.COM Use an asterisk as a wildcard character before a realm name to include all realms that include the name. For example: *EAST.COMPANY.COM
User realm name	Name of the Kerberos realm that the domain uses to authenticate users. The realm name must be in uppercase and is case-sensitive. To configure Kerberos cross realm authentication, specify the name of each Kerberos realm that the domain uses to authenticate users, separated by a comma. For example: COMPANY.COM,EAST.COMPANY.COM,WEST.COMPANY.COM Use an asterisk as a wildcard character before a realm name to include all realms that include the name. For example: *EAST.COMPANY.COM
Keytab directory	Directory where all keytab files for the Informatica domain are stored. The name of a keytab file in the Informatica domain must follow a format set by Informatica.
Kerberos configuration file	Path and file name of the Kerberos configuration file. Informatica requires the following name for the Kerberos configuration file: `krb5.conf`

If you configure the domain to run with Kerberos authentication, the domain and node name and the node host name must match the names you specified when you ran the Informatica Kerberos SPN Format Generator to generate SPN and keytab file names. If you use a different domain, node, or host name, generate the SPN and keytab file names again and ask the Kerberos administrator to add the new SPN to the Kerberos principal database and create the keytab files.

Click

The

Pre-Installation Summary

section appears. Review the installation information.

Create a Domain

Download Guide

Watch

Comments

Communities

Knowledge Base

Success Portal