Security Guide > Kerberos Authentication Setup > Step 8. Update the Nodes in the Domain
  

Step 8. Update the Nodes in the Domain

Run the infasetup command to update all other nodes in the domain with the Kerberos authentication server information.
Update all gateway and worker nodes with the Kerberos authentication server information except the gateway node on which you ran the switchToKerberosMode command.
To update the gateway and worker nodes, use the following commands:
infasetup UpdateGatewayNode
Use the UpdateGatewayNode command to set the Kerberos authentication parameters on a gateway node in the domain. If the domain has multiple gateway nodes, run the UpdateGatewayNode command on each gateway node.
infasetup UpdateWorkerNode
Use the UpdateWorkerNode command to set the Kerberos authentication parameters on a worker node in the domain. If the domain has multiple worker nodes, run the UpdateWorkerNode command on each worker node.
    1. On a machine that hosts an Informatica node, run the infasetup command to update the node.
    At the command prompt, go to the directory where the Informatica command line programs are located. By default, the command line programs are installed in the following directory: <InformaticaInstallationDir>/isp/bin
    2. Run infasetup with the required options and arguments.
    Enter the following command:
    The following table describes the options to update the Kerberos authentication information for a node:
    Option
    Argument
    Description
    -EnableKerberos
    -krb
    enable_kerberos
    Configures the Informatica domain to use Kerberos authentication.
    -ServiceRealmName
    -srn
    realm _name_of_node_spn
    Name of the Kerberos realm to which the Informatica domain services belong. The realm name must be in uppercase and is case-sensitive.
    The service realm name and the user realm name must be the same.
    -UserRealmName
    -urn
    realm _name_of_user_spn
    Name of the Kerberos realm to which the Informatica domain users belong. The realm name must be in uppercase and is case-sensitive.
    The service realm name and the user realm name must be the same.