-kl server option

Specifies the file name of the Kerberos GSS-API library (or shared object on Unix) and enables Kerberos authenticated connections to the database server.

Syntax
{ dbsrv11 | dbeng11 } -kl GSS-API-library-file ...
Applies to

All operating systems except Windows Mobile.

Remarks

This option specifies the location and name of the Kerberos GSS-API. This option is only required if the Kerberos client uses a different file name for the Kerberos GSS-API library than the default, or if there are multiple GSS-API libraries installed on the computer running the database server. A Kerberos client must already be installed and configured, and SSPI cannot be used by the database server.

Specifying this option enables Kerberos authentication to the database server.

See also
Example

The following command starts a database server that uses the libgssapi_krb5.so shared object for Kerberos authentication.

dbsrv11 -kl libgssapi_krb5.so -n my_server_princ /opt/myapp/kerberos.db