i) Create keytab file in SQL Server installed machine using the steps mentioned in the bottom of the page.
SQLJDBCDriver {
com.sun.security.auth.module.Krb5LoginModule required
useTicketCache=false
doNotPrompt=true
useKeyTab=true
keyTab="C://Users//kerberosuser.MSSQLKERBEROS//Desktop//kerberos//AppManager14//working//conf//KerberosConfigurations//MSSQL//krb5.keytab"
principal="MSSQLSvc/mssql-kerberos-dc1.mssqlkerberos.com:1433@MSSQLKERBEROS.COM"
storeKey=false
debug=false;
i) Run kinit program for the user account to which kerberos is enabled using the steps mentioned in the bottom of the page. By default ticket cache file will be created in the location {user.home}{file.separator}krb5cc_{user.name}
SQLJDBCDriver {
com.sun.security.auth.module.Krb5LoginModule required
useTicketCache=true
ticketCache="C://Users//kerberosuser.MSSQLKERBEROS//Desktop//kerberos//AppManager14//working//conf//KerberosConfigurations//MSSQL//krb5cc_kerberosuser"
doNotPrompt=true
useKeyTab=false
principal="kerberosuser@MSSQLKERBEROS.COM"
storeKey=false
debug=false;
SQLJDBCDriver {
com.sun.security.auth.module.Krb5LoginModule required
useTicketCache=false
doNotPrompt=false
useKeyTab=false
principal="MSSQLSvc/mssql-kerberos-dc1.mssqlkerberos.com:1433@MSSQLKERBEROS.COM"
storeKey=false
debug=true;
8. Open <APM_HOME>\working\jre\lib\security\java.security file and check for the line (line 141)
#login.config.url.1=file:${user.home}/.java.login.config
Add the below entry after this line,
10. Now start Applications Manager and check kerberos authentication using below query in the respective SQL server. (auth_scheme should be returned as "KERBEROS")
(or)
2. For mssql monitors to use kerberos authentication we have provided a new option 'Enable Kerberos Authentication' in add monitor page.
3. Host name should be entered as Fully Qualified Domain Name (for example : mssql-kerberos-dc1.mssqlkerberos.com)
4. If you configured the monitors to use ticketCache or keyTab then password can be passed empty for this case.
5. Add the monitor and check for the below print in stdout file