Configuring Kerberos authentication for the ODBC Client and ADO Client

If the Client is installed on Windows, the Kerberos realm and KDC name for that realm are automatically detected by the Windows operating system.

Note: In Windows Active Directory, the Kerberos realm name is the Windows domain name and the KDC name is the Windows domain controller name.

If the Client is installed on UNIX or Linux, you must modify a Kerberos configuration file named krb5.conf to specify values for the Kerberos realm and the KDC name for that realm. Typically, this file is installed by the Kerberos implementation provided by your UNIX or Linux operating system and is located in the /etc subdirectory of your UNIX or Linux machine.

For example, if your Kerberos realm name is XYZ.COM and your KDC name is kdc1, your krb5.conf file would look like this:

[libdefaults]
      default_realm = XYZ.COM
      default_keytab_name = FILE:/etc/krb5/krb5.keytab
      default_tkt_enctypes = des3-cbc-sha1 des-cbc-md5 des-cbc-crc
      default_tgs_enctypes = des3-cbc-sha1 des-cbc-md5 des-cbc-crc
[realms]
      XYZ.COM = {
          kdc = kdc1:88
          admin_server = server1.eu.xyz.com:749
          default_domain = kdc1
      };
[domain_realm]
      .xyz.com = XYZ.COM
      .eu.xyz.com = XYZ.COM
[logging]
      kdc = FILE:/var/krb5/log/krb5kdc.log
      admin_server = FILE:/var/krb5/log/kadmin.log
      default = FILE:/var/krb5/log/krb5lib.log