kerberosSettings Entity

Before you configure Kerberos authentication, review Kerberos Requirements.

Use the configuration file template below to create a json file. After you have filled in the options with the appropriate values, pass the json file and apply settings with the following commands:

tsm settings import -f /path/to/file.json

tsm pending-changes apply

If the pending changes require a server restart, the pending-changes apply command will display a prompt to let you know a restart will occur. This prompt displays even if the server is stopped, but in that case there is no restart. You can suppress the prompt using the --ignore-prompt option, but this does not change the restart behavior. If the changes do not require a restart, the changes are applied without a prompt. For more information, see tsm pending-changes apply.

Configuration template

Use this template to configure Kerberos settings.

Important: All entity options are case sensitive.

For more explanation about configuration files, entities, and keys see Configuration File Example.

After you have finished with the initial configuration of Kerberos authentication, use the tsm authentication kerberos <commands> sub-category to set additional values.

{
  "configEntities": {
	"kerberosSettings": {
		"_type": "kerberosSettingsType",
		"enabled": "true",
		"keytabFile": "/path/to/keytab_file"
        }
     }			
 }

Configuration file reference

The following list includes all of the options that can be included with the "kerberosSettings" entity set.

Option
Value
enabled

Options: true or false.

Enables Kerberos authentication.

keytabFile

Required.

Path to valid Kerberos keytab file.

dBClasses
Comma-separated list of database classes for global credentials. May be required for connecting to Cloudera data sources.