Skip Ribbon Commands
Skip to main content
Navigate Up
Sign In

Quick Launch

Average Rating:
facebook Twitter
Email 		Print Bookmark Alert me when this article is updated

Feedback

FAQ: What are the SPN formats required by the Informatica services in a Kerberos-authenticated Informatica domain?
Answer
Following Service Principal Name (SPN) formats are required by the Informatica services in an Informatica domain setup with Kerberos Authentication.
 
Following table lists the SPN format and keytab file names required by Informatica services:
 

Informatica Component

SPN format

Keytab file name format

All Nodes
isp/<NodeName>/<DomainName>@<REALM>
<NodeName>.keytab
AdminConsole (Gateway nodes only)
_AdminConsole/<NodeName>/<DomainName>@<REALM>
_AdminConsole.keytab
HTTP (Gateway nodes only)
HTTP/<hostname.fullyqualifieddomainname>@<REALM>
webapp_http.keytab
Informatica services (such as PowerCenter repository service etc…)
<ServiceName>/<NodeName>/<DomainName>
<ServiceName>.keytab
Synchronizing users with Lightweight Directory Access Protocol (LDAP)
UserPrinicipalName used to bind to LDAP server to query users and groups
infa_ldapuser.keytab
More Information
  • <DomainName> represents the Informatica domain name.
  • <HostName.FullyQualifiedDomainName> represents the complete hostname including the network domain (FQDN). For instance, host somehost in the domain example.com should be represented as somehost.example.com
  • <REALM> represents the realm name as defined in krb5.conf, and it is specified in upper case.
Applies To
Product: PowerCenter; Data Services; Data Quality
Problem Type:
User Type:
Project Phase:
Product Version: Informatica 9.6.0
Database:
Operating System:
Other Software:

Reference
For more information, see Informatica 9.6.0 Security Guide > "Chapter 2: User Authentication" > "Step 1. Create the Service Principal Names and Keytab Files"
Attachments

Last Modified Date:2/11/2014 10:27 PMID:158917
People who viewed this also viewed

Feedback

Did this KB document help you?

What can we do to improve this information (2000 or fewer characters)