Kerberos requirements

Prerequisites

Basic requirements prior to the configuration:

• MIT Kerberos 1.4.4 KDC

• Kerberos REALM name

• Global Kerberos principal name (specified without trailing @REALM name)

• Global Kerberos principal keytab data encoded as a base 64 string

• KDC hostnames and port numbers (one or more in priority list order)

Environment requirements

Version 6.0.7.0 or later recommended for Kerberos

Any Delphix Engine intending to leverage Kerberos credentials should be running version 6.0.7.0 or later. Versions 6.0.0.0-6.0.6.1 may encounter issues in authentication ticket renewal, causing Environment and Dataset job failures. More information can be found in this Delphix Knowledge Base article.

The following hosts and software versions are required: 

• A source host with the following configuration:

  • A running SAP ASE, Oracle, or DB2 instance.

  • A database to link from and its corresponding full database dump. 

  • The Delphix principal is able to access the SAP ASE instance and SSH onto the host as per our product documentation (see Requirements for SAP ASE).

  • The credential cache for the Delphix principal is populated and kept current. The environment variable KRB5CCNAME is set to the location for a credential cache. Login to the Adaptive Server via "isql_r64 -V -R>><>" or "isql_r -V -R>><>" or otherwise make sure that "isql" points to either "isql_r64 or isql_r" so that ""isql -V -R>><> works.

• A staging host with the following configuration:

  • A running SAP ASE, Oracle, or DB2 instance with the same version as the source instance.

  • The Delphix principal is able to access the SAP ASE instance and SSH onto the host as per our product documentation (see   Requirements for SAP ASE  ).

  • The credential cache for the Delphix principal is populated and kept current. The environment variable KRB5CCNAME is set to the location for a credential cache. Login to the Adaptive Server via "isql_r64 -V -R>><>" or "isql_r -V -R>><>" or otherwise make sure that "isql" points to either "isql_r64 or isql_r" so that ""isql -V -R>><> works.

• A target host to create a VDB on. Configuration details:

  • A running SAP ASE, Oracle, or DB2 instance with the same version as the source instance.

  • The Delphix principal is able to access the SAP ASE instance and SSH onto the host as per our product documentation (see  Requirements for SAP ASE     ).

  • The credential cache for the Delphix principal is populated and kept current. The environment variable KRB5CCNAME is set to the location for a credential cache. Login to the Adaptive Server via "isql_r64 -V -R>><>" or "isql_r -V -R>><>" or otherwise make sure that "isql" points to either "isql_r64 or isql_r" so that ""isql -V -R>><> works.

Supported databases and Kerberos configurations

For detailed Kerberos support please refer to Kerberos Support Matrix

Delphix Engine 5.3.2.0 is the first generally available customer release to support Kerberos on a subset of supported OS' with SAP ASE, Oracle, and DB2 databases. 

With the Delphix Engine 5.3.2.0 release, many of the previously unsupported GUI functions now function when Kerberos is enabled. See  Configuring Kerberos via the UI   below for details, including limitations.