Security Guide > Security Guide > A. Configuring Ingres to Use Kerberos > Ingres Configuration Options for Kerberos > Basic Configuration for Kerberos
Was this helpful?
Basic Configuration for Kerberos
When you configure Ingres to use Kerberos, you should first check the basic configuration. The basic configuration consists of the mechanisms parameter and the domain parameter in the Security component.
mechanisms Parameter--Specify Dynamic Mechanism
For Ingres to use Kerberos as a dynamic mechanism, the mechanism parameter must be set to kerberos. In Configuration-By-Forms, the mechanisms parameter is located in Security, Configure, System.
The setting should look similar to this:
Name
Value
Units
mechanisms
kerberos
mechanism list
Note:  The ingres, system, or null mechanisms are invalid entries to this list, since its purpose is to specify the dynamic authentication mechanisms.
domain Parameter--Specify Domain Name
In addition to the mechanism parameter, the domain parameter must be set to configure Ingres to use Kerberos.
In Configuration-By-Forms, the domain parameter is located in Security, Configure, System, Mechanisms, Kerberos.
The domain parameter must contain the fully qualified host name of the local installation. This name corresponds to the Ingres service principal name. For example, for machine foo.xyz.com, the value for the domain parameter should be “foo.xyz.com.” If the entry reads simply “foo,” edit and correct the entry.
The setting should look similar to this:
Name
Value
Units
domain
foo.xyz.com
hostname
Last modified date: 08/28/2024