In addition to the mechanism parameter, the domain parameter must be set to configure Ingres to use Kerberos.

In Configuration-By-Forms, the domain parameter is located in Security, Configure, System, Mechanisms, Kerberos.

The domain parameter must contain the fully qualified host name of the local installation. This name corresponds to the Ingres service principal name. For example, for machine foo.xyz.com, the value for the domain parameter should be “foo.xyz.com.” If the entry reads simply “foo,” edit and correct the entry.

The setting should look similar to this: