Purpose

Specifies the service principal name to be used for Kerberos authentication.

Valid Values

ServicePrincipalName

where:

ServicePrincipalName
is the three-part service principal name registered with the key distribution center (KDC).

Specify the service principal name using the following format:

Service_Name/Fully_Qualified_Domain_Name@REALM.COM

where:

Service_Name
is the name of the service hosting the instance. It is the same value as the krb_svrname configuration parameter on the server. The default is postgres.
Fully_Qualified_Domain_Name

is the fully qualified domain name (FQDN) of the host machine. This value must match the FQDN registered with the KDC. The FQDN consists of a host name and a domain name. For the example myserver.example.com, myserver is the host name and example.com is the domain name.

REALM.COM

is the domain name of the host machine. This value is optional. If no value is specified, the default domain is used. The domain must be specified in upper-case characters. For example, EXAMPLE.COM. For Windows Active Directory, the Kerberos realm name is the Windows domain name.

Example

The following is an example of a valid service principal name:

postgres/myserver.example.com@EXAMPLE.COM

Notes

  • If AuthenticationMethod is set to userIdPassword, the value of the ServicePrincipalName property is ignored.

Data Source Methods

public String getServicePrincipalName()

public void setServicePrincipalName(String)

Default

No default value

See also