Setting the DSN for ODBC Clients and Kerberos SSO
Using Kerberos with an ODBC client requires driver configuration. ODBC Client applications can connect with TDV using a 32-bit or a 64-bit TDV driver. The computer on which the ODBC client application resides must have one of the TDV drivers installed and configured.
Follow these steps to add the Kerberos system DSN:
1. Log in as an administrator.
NOTE: The ODBC manager may truncate the password at 14 characters.
2. Run one of the following to install the ODBC driver on a Windows client:
— CsOdbcInstall<version>.exe installs cis<version>.dll
— CsOdbcInstall<version>_x64.exe installs cis<version>_x64.dll
3. Open the ODBC Data Source Administrator, accessible through the Windows control panel named Data Sources (ODBC) under Administrative Tools.
4. Select the System DSN tab, click the Add button, select the system data source you just installed, and click Finish.
The ODBC Driver Configuration window appears.
5. In the ODBC Driver Configuration window, set the Integrated Authentication field to Kerberos.
This System DSN enables TDV to recognize the specified data source and catalog.
6. Define the Kerberos SPN using the Microsoft format:
HTTP/FullyQualified_HostName@Realm
7. Click Test.
8. Once the Test Connection is successful, click OK.
About ODBC Linux Clients and Kerberos SSO
The TDV Linux ODBC driver can support Kerberos as long as the following conditions are met:
• Header files of a GSSAPI library that implements Kerberos (MIT, Heimdal, Centrify, or another) are available for dynamic loading at run time.
• The system has LIBDL and a GCC compiler.
• You run kinit <user>.
If you do not run kinit, you get a GSS library error message that reads, ‘Failed to connect to DSN ‘ktest’: Exception: Problem initializing context.’