Establishing Kerberos security for remote connections

Adaptive Server acts as the client when it connects to another server to execute a remote procedure call (RPC) and for remote connections through Component Integration services (CIS).

For remote server logins through Adaptive server for RPC execution, one physical connection is established between the two servers. The servers use the physical connection to establish one or more logical connections—one logical connection for each RPC.

Adaptive server supports end-to-end Kerberos authentication for Kerberos logins that attempt remote server connections through CIS using the credential delegation feature provided by Kerberos version 5.The credential delegation or ticket forwarding allows a Kerberos client to delegate the credential when connecting to a server, thereby allowing the server to initiate Kerberos authentication for further connections to other servers on behalf of Kerberos client.A Kerberos client connected to Adaptive server can request a Remote Procedure Call (RPC) to Adaptive Server, and for general distributed query processing requests to a remote Adapter Server through CIS by using the Kerberos credential delegation feature. The Kerberos authentication feature used for connections to remote Adaptive servers is not supported for remote server logins. For information about configuring CIS Kerberos Authentication, see “Configuration for Component Integration Services Remote Procedure Calls,” in Chapter 2, “Understanding Component Integration Services” in the Component Integration Services User Guide.