Basic Configuration for Kerberos
When you configure Vector to use Kerberos, you should first check the basic configuration. The basic configuration consists of the mechanisms parameter and the domain parameter in the Security component.
mechanisms Parameter--Specify Dynamic Mechanism
For Vector to use Kerberos as a dynamic mechanism, the mechanism parameter must be set to kerberos. In Configuration-By-Forms, the mechanisms parameter is located in Security, Configure, System.
The setting should look similar to this:
Note: The ingres, system, or null mechanisms are invalid entries to this list, since its purpose is to specify the dynamic authentication mechanisms.
domain Parameter--Specify Domain Name
In addition to the mechanism parameter, the domain parameter must be set to configure Vector to use Kerberos.
In Configuration-By-Forms, the domain parameter is located in Security, Configure, System, Mechanisms, Kerberos.
The domain parameter must contain the fully qualified host name of the local installation. This name corresponds to the Vector service principal name. For example, for machine foo.xyz.com, the value for the domain parameter should be “foo.xyz.com.” If the entry reads simply “foo,” edit and correct the entry.
The setting should look similar to this: