Skip Ribbon Commands
Skip to main content
Navigate Up
Sign In

Quick Launch

Average Rating:

facebook Twitter
Email
Print Bookmark Alert me when this article is updated

Feedback

HOW TO: Connect to Microsoft SQL Server from Informatica Developer using Kerberos Authentication
Solution
Perform the following steps to configure Kerberos authentication in a Microsoft SQL Server connection before you can connect to Microsoft SQL Server sources and targets from Informatica Developer:

Configure the Informatica Developer Client for Microsoft SQL Server Kerberos Authentication

Step 1: Create JDBCDriverLogin.conf File


Perform the following steps to create the JDBCDriverLogin.conf configuration file on the Informatica Client machine:


1. Navigate to the following location on the Informatica Client machine: <Informatica installation directory>\clients\DeveloperClient\

2. Create JDBCDriverLogin.conf file.

3. Add the following entry:


JDBC_DRIVER_01 {

  com.sun.security.auth.module.Krb5LoginModule required useTicketCache=true;

};

 

Step 2: Create the krb5.conf File

Create a krb5.conf file on the Informatica Client machine and add the entries for the KDC and Admin servers.

For example:


EXAMPLE.COM = {

  kdc = kerberos.example.com

  admin_server = kerberos.example.com

 }

 

Step 3: Configure the  developercore.ini File

Perform the following steps to configure the developercore.ini file:


1. Navigate to the following location on the Informatica Client machine: <Informatica installation directory>\clients\DeveloperClient\

2. Open the developercore.ini file.

3. Add the following properties in the developercore.ini file, and specify the location of the JDBCDriverLogin.conf and the krb5.conf files. 


For example:


 -Djava.security.auth.login.config=JDBCDriverLogin.conf

 -Djava.security.krb5.conf=E:/Connectivity/krb5.conf


4. Restart the Informatica Developer Client for the changes to reflect.

Step 4: Generate the Credential Cache for the User

Generate the credential cache for the user that you want to use during the Kerberos authentication: 

  1. On the Informatica Client machine, run the following command:  
    ​​​​​​Kinit <user name>@<realm_name>
  2. ​​​​​Specify the password when prompted.​


Configure the Informatica Server for Microsoft SQL Server Kerberos Authentication​

Step 1: Configure the ODBC DSN in the odbc.ini File

Create the ODBC DSN with the Microsoft SQL Server database details in the odbc.ini file. You must set the ODBCINI environment variable to the location of the odbc.ini file.


In the DSN entry, set the following values:

  • Set the value of AuthenticationMethod to 4
  • Set the GSSClient value to point to the Informatica Kerberos libraries at the following directory:
 ​<Informatica Server installation directory>/services/shared/bin/libgssapi_krb5.so.2 

Refer to the following sample DSN entry:
 

        [SQLServer_KERB]

                Driver=<Informatica Server installation directory>/ODBC7.1/lib/DWsqls28.so

                Description=SQL Server 2016 Connection for Kerberos

                HostName=<hostname>

                PortNumber=1433

                Database=<dbname>

                QuotedId=No

                AnsiNPW=Yes

                AuthenticationMethod=4

GSSClient=<Informatica Server installation directory>/services/shared/bin/libgssapi_krb5.so.2

        EnableQuotedIdentifiers=1

Step 2: Generate the Credential Cache for the User

Generate the credential cache for the user that you want to use during the Kerberos authentication: 

  1. On the Informatica Server machine, use the following command: 
    Kinit <user name>@<realm_name> 
  2. ​Specify the password when prompted.

 

Configure the Microsoft SQL Server Connection for Kerberos Authentication


To connect to Microsoft SQL Server from the Developer tool using Kerberos authentication, configure the following parameters in the Microsoft SQL Server connection:


1​. In the Metadata Access section, in the Connection String field, specify the authentication method as Kerberos in the JDBC URL:  AuthenticationMethod=Kerberos
 
For instance:  jdbc:informatica:sqlserver://<hostname>;SelectMethod=cursor;databaseName=<dbname>;AuthenticationMethod=kerberos;    
Note

When you specify the Kerberos authentication in the JDBC URL, the username and password are not considered. However, ensure that you specify a dummy username and password.


2. In the Data Access section, perform the following tasks:


a. Enable the Use DSN option.

b. In the Connection String field, specify the DSN name that you created for Microsoft SQL Server in the odbc.ini file located in the Informatica Server machine.

​​The following image shows the configured properties: 
Image.png 
​​​
More Information
Reference
Applies To
Product: Data Quality
Problem Type: Configuration
User Type: Administrator
Project Phase: Configure
Product Version:
Database: Microsoft SQL Server
Operating System:
Other Software:
Attachments
Last Modified Date:6/30/2020 9:49 PMID:627932
People who viewed this also viewed

Feedback

Did this KB document help you?



What can we do to improve this information (2000 or fewer characters)