SwitchToKerberosMode
Configure the Informatica domain to use Kerberos authentication.
The SwitchToKerberosMode command uses the following syntax:
SwitchToKerberosMode
<-administratorName|-ad> administrator_name
<-ServiceRealmName|-srn> realm_name_of_node_spn
<-UserRealmName|-urn> realm_name_of_user_spn
[<-SPNShareLevel|-spnSL> SPNShareLevel PROCESS|NODE]
The following table describes infasetup SwitchToKerberosMode options and arguments:
Option | Argument | Description |
|---|
-administratorName -ad | administrator_name | Required. Name of the user to select as the default administrator. |
-ServiceRealmName -srn | realm_name_of_node_spn | Required. Name of the Kerberos realm to which the Informatica domain services belong. Ensure that you enter the same value as -urn for Kerberos authentication. |
-UserRealmName -urn | realm_name_of_user_spn | Required. Name of the Kerberos realm to which the Informatica domain users belong. Ensure that you enter the same value as -srn for Kerberos authentication. |
SPNShareLevel -spnSL | SPNShareLevel PROCESS|NODE] | Optional. Indicates the service principal level for the domain. Set the property to one of the following levels: - - Process. The domain requires a unique service principal name (SPN) and keytab file for each node and each service on a node. The number of SPNs and keytab files required for each node depends on the number of service processes that run on the node. Recommended for production domains.
- - Node. The domain uses one SPN and keytab file for the node and all services that run on the node. It also requires a separate SPN and keytab file for all HTTP processes on the node. Recommended for test and development domains. Recommended for test and development domains.
Default is process. |