kerberosSettings Entity
Before you configure Kerberos authentication, review Kerberos Requirements.
Use the configuration file template below to create a json file. After you have filled in the options with the appropriate values, pass the json file and apply settings with the following commands:
tsm settings import -f /path/to/file.json
tsm pending-changes apply
If the pending changes require a server restart, the pending-changes apply
command will display a prompt to let you know a restart will occur. This prompt displays even if the server is stopped, but in that case there is no restart. You can suppress the prompt using the --ignore-prompt
option, but this does not change the restart behavior. If the changes do not require a restart, the changes are applied without a prompt. For more information, see tsm pending-changes apply.
Configuration template
Use this template to configure Kerberos settings.
Important: All entity options are case sensitive.
For more explanation about configuration files, entities, and keys see Configuration File Example.
After you have finished with the initial configuration of Kerberos authentication, use the tsm authentication kerberos <commands> sub-category to set additional values.
{ "configEntities": { "kerberosSettings": { "_type": "kerberosSettingsType", "enabled": "true", "keytabFile": "/path/to/keytab_file" } } }
Configuration file reference
The following list includes all of the options that can be included with the "kerberosSettings"
entity set.
- Option
- Value
- enabled
Options:
true
orfalse
.Enables Kerberos authentication.
- keytabFile
Required.
Path to valid Kerberos keytab file.
- dBClasses
- Comma-separated list of database classes for global credentials. May be required for connecting to Cloudera data sources.