Configuring Kerberos Authentication in an Informatica Domain

Back Next

Step 2. Update All Other Nodes in the Domain

Update all gateway and worker nodes with the Kerberos authentication server information except the gateway nodes on which you ran the infasetup switchToKerberosMode command.

To update the gateway and worker nodes, use the following commands:

infasetup UpdateGatewayNode: Use the UpdateGatewayNode command to set the Kerberos authentication parameters on a gateway node in the domain. If the domain has multiple gateway nodes, run the UpdateGatewayNode command on each gateway node.
infasetup UpdateWorkerNode: Use the UpdateWorkerNode command to set the Kerberos authentication parameters on a worker node in the domain. If the domain has multiple worker nodes, run the UpdateWorkerNode command on each worker node.

Shut down the domain and all Informatica services. Shut down the services in the following order:

Metadata Manager Service

PowerCenter® Integration Service

PowerCenter® Repository Service

Content Management Service

Analyst Service

Data Integration Service

Model Repository Service

At the command prompt on a node, switch to the directory where the infasetup executable is located:

<Informatica installation directory>\isp\bin

To set the Kerberos authentication parameters on a gateway node, run the following command:

infasetup UpdateGatewayNode -krb -srn <ServiceRealmName> -urn <UserRealmName>

To set the Kerberos authentication parameters on a worker node, run the following command:

infasetup UpdateWorkerNode -krb -srn <ServiceRealmName> -urn <UserRealmName>

The following table describes the options required to update the Kerberos authentication information for a node:

Option	Description
-EnableKerberos -krb	Configures the Informatica domain to use Kerberos authentication.
-ServiceRealmName -srn	Name of the Kerberos realm specified in the Kerberos configuration file. The realm name must be in uppercase and is case-sensitive. The service realm name and the user realm name must be the same.
-UserRealmName -urn	Name of the Kerberos realm specified in the Kerberos configuration file. The service realm name and the user realm name must be the same.

The following example updates a worker node to use Kerberos authentication:

infasetup updateWorkerNode -krb -srn EXAMPLE.COM -urn EXAMPLE.COM

Rename Saved Search

Table of Contents

Configuring Kerberos Authentication in an Informatica Domain

Configuring Kerberos Authentication in an Informatica Domain

Step 2. Update All Other Nodes in the Domain

Step 2. Update All Other Nodes in the Domain