Kerberos Configuration Parameters

KerberosServiceName

Provides the service name portion of the Vertica Kerberos principal. By default, this parameter is 'vertica'. For example: vertica/[email protected].

KerberosHostname

[Optional] Provides the instance or host name portion of the Vertica Kerberos principal. For example: vertica/host@EXAMPLE.COM

If you omit the optional KerberosHostname parameter, Vertica uses the return value from the gethostname() function. Assuming each cluster node has a different host name, those nodes will each have a different principal, which you must manage in that node's keytab file.

KerberosRealm

Provides the realm portion of the Vertica Kerberos principal. A realm is the authentication administrative domain and is usually formed in uppercase letters; for example: vertica/host@EXAMPLE.COM.

KerberosKeytabFile

Provides the location of the keytab file that contains credentials for the Vertica Kerberos principal. By default, this file is located in /etc. For example: KerberosKeytabFile=/etc/krb5.keytab.

Notes:

• The principal must take the form KerberosServiceName/KerberosHostName@KerberosRealm
• The keytab file must be readable by the file owner who is running the process (typically the Linux dbadmin user assigned file permissions 0600).

Determines the lifetime of the ticket retrieved from performing a kinit. The default is 0 (zero) which disables this parameter.

If you do not enter a value here, the lifetime is determined by the default Kerberos configuration.