Before attempting to configure Kerberos for jConnect, make sure you have the following:
JDK 6 or later
A Java Generic Security Services (GSS) Manager:
The default GSS Manager, which is part of the JDK, or
Wedgetail JCSI Kerberos version 2.6 or later, or
CyberSafe TrustBroker Application Security Runtime Library version 3.1.0 or later, or
A GSS Manager implementation from another vendor.
A KDC that is supported and interoperable at the server side with your GSS library and at the client side with your GSSManager.
To enable Kerberos login with jConnect, use the following procedure.
Configuring Kerberos for jConnect
Set the REQUEST_KERBEROS_SESSION property to "true."
Set the SERVICE_PRINCIPAL_NAME property to the name that your Adaptive Server Enterprise is running under. In general, this is the name set with the -s option when the server is started. The service principal name must also be registered with the KDC. If you do not set a value for the SERVICE_PRINCIPAL_NAME property, jConnect defaults to using the host name of the client machine.
Optionally, set the GSSMANAGER_CLASS property.
For more information on the REQUEST_KERBEROS_SESSION and SERVICE_PRINCIPAL_NAME properties, see Chapter 2, “Programming Information.” For more information on the GSSMANAGER_CLASS property, see “GSSMANAGER_CLASS connection property.”
