Specifies the file name of the Kerberos GSS-API library (or shared object on Unix) and enables Kerberos authenticated connections to the database server.

Syntax

{ dbsrv11 | dbeng11 } -kl GSS-API-library-file ...

Applies to

All operating systems except Windows Mobile.

Remarks

This option specifies the location and name of the Kerberos GSS-API. This option is only required if the Kerberos client uses a different file name for the Kerberos GSS-API library than the default, or if there are multiple GSS-API libraries installed on the computer running the database server. A Kerberos client must already be installed and configured, and SSPI cannot be used by the database server.

Specifying this option enables Kerberos authentication to the database server.

See also

• -kr server option
• -krb server option
• Kerberos connection parameter [KRB]
• Using Kerberos authentication
• GRANT statement

Example

The following command starts a database server that uses the libgssapi_krb5.so shared object for Kerberos authentication.

dbsrv11 -kl libgssapi_krb5.so -n my_server_princ /opt/myapp/kerberos.db