ODBC Connector

Back Next

Configuring the kerberos authentication

Before you use Kerberos authentication to connect to DB2 on Linux or Windows, the organization administrator needs to perform the prerequisite tasks.

To configure the

krb5.conf

file, perform the following tasks:

Create a

krb5.conf

file on the Secure Agent machine.

Add the details of the Key Distribution Center (KDC) and admin server to the

krb5.conf

file in the following format:

[libdefaults]
default_realm = <Realm name>
forwardable = true
ticket_lifetime = 24h

[realms]
<REALM NAME> = {
kdc = <Location where KDC is installed> 
admin_server = <Location where KDC is installed>
                                }
 [domain_realm]
<domain name or host name> = <Domain name or host name of Kerberos>
<domain name or host name> = <Domain name or host name of Kerberos>

Set the following environment variables on the Secure Agent machine.

For more information about the required environment variables, see Setting environment variables.

Restart the Secure Agent.

To generate the credential cache file on the Secure Agent machine and use Kerberos authentication to connect to DB2, perform the following tasks:

On the Secure Agent machine, run the following command and specify the DB2 user name and realm name: