PostgreSQL Connector

Back Next

Configuring Kerberos authentication

Before you use Kerberos authentication to connect to PostgreSQL on Linux or Windows, the organization administrator needs to perform the prerequisite tasks.

To configure the Java Authentication and Authorization Service configuration file (JAAS), perform the following tasks:

Create a JAAS configuration file on the Secure Agent machine.

Add the following entries to the JAAS configuration file:

JDBC_DRIVER_01 {
com.sun.security.auth.module.Krb5LoginModule required useTicketCache=true;
};

To configure the

krb5.conf

file, perform the following tasks:

Create a

krb5.conf

file on the Secure Agent machine.

Add the details of the Key Distribution Center (KDC) and admin server to the

krb5.conf

file in the following format:

[libdefaults]
default_realm = <Realm name>
forwardable = true
ticket_lifetime = 24h

[realms]
<REALM NAME> = {
kdc = <Location where KDC is installed> 
admin_server = <Location where KDC is installed>
                                }
 [domain_realm]
<domain name or host name> = <Domain name or host name of Kerberos>
<domain name or host name> = <Domain name or host name of Kerberos>

Set the following environment variables on the Secure Agent machine.

For more information about the required environment variables, see Setting environment variables.

Restart the Secure Agent.

To generate the credential cache file on the Secure Agent machine and use Kerberos authentication to connect to PostgreSQL, perform the following tasks:

From the command line on the Secure Agent machine, run the following command and specify the PostgreSQL user name and realm name: