Install and configure the MIT software on your system, version 1.3.1 or later.
Set the desired security features using ct_con_props, or use the default credentials by not setting credential properties.
Configure the security section of the libtcl.cfg configuration file.
Verify that the application has a preexisting user credential to connect to the server. In other words, the user of the application must log in to the Kerberos environment using the kinit utility, before running the client application.
If a user name is supplied, it must match the user’s preexisting credential. If a user name is not supplied, Client-Library connects to the server using the user name associated with the user’s credential.
The environment variable KRB5CCNAME sets the path to the credentials cache file. If the corresponding file is located in a non-default directory, set the environment variable to the file’s full path.
For more information, refer to your documentation.
The MIT GSS library, libgssapi_krb5.so, must be specified in the libtcl.cfg file using the libgss keyword. Sybase recommends providing the full path to the Kerberos driver.
No extra flags are required when compiling your Client-Library applications to use Kerberos security services.
Once you have configured Open Client and Open Server and Kerberos, you can use isql to test your configuration.
See README.SEC in the $SYBASE_OCS/sample/srvlibrary directory for an example of configuring and running the sample program.
