About the Security Guide
Introduction to Informatica Security
User Authentication
LDAP Authentication
Kerberos Authentication
SAML Authentication for Informatica Web Applications
Domain Security
Security Management in Informatica Administrator
Users and Groups
Privileges and Roles
Permissions
Audit Reports
Appendix A: Command Line Privileges and Permissions
Appendix B: Custom Roles

Security Guide

10.5.4
- 10.5.5
- 10.5.3
- 10.5.2
- 10.5.1
- 10.5
- 10.4.1

Back Next

Enable Full Delegation for the Kerberos Principal User Accounts in Active Directory

Create the keytab files using the

ktpass

command.

To use full delegation, you must enable delegation for all of the accounts you created, except for the LDAP bind user account that you use to access and search Active Directory during LDAP synchronization.

To enable full delegation, perform the following steps for each user account:

Right-click the user account and select

Properties

The

Properties

dialog box appears.

On the

Delegation

tab, select

Trust this user for delegation to any service (Kerberos only)

Click

Apply

Full delegation is enabled.

Kerberos Delegation

Download Guide

Watch

Comments

Communities

Knowledge Base

Success Portal

0 COMMENTS

We’d like to hear from you! Log in to comment.

Rename Saved Search

Table of Contents

Security Guide

Security Guide

Enable Full Delegation for the Kerberos Principal User Accounts in Active Directory

Enable Full Delegation for the Kerberos Principal User Accounts in Active Directory