kerberos and LDAP with DRDA
Posted in 2011
Hello:
We are trying to configure our Informix Server 11.70 installed in RedHat 5 to
validate users against a Windows Active Directory. First, we did it using PAM,
and then we tried SSO using kerberos, and both worked. We used the following
configuration in sqlhosts:
olpam onsoctcp ifx1170.vpngest.unican.es 1530
s=4,pam_serv=(ids_pam_service),pamauth=(password)
olkrb onsoctcp ifx1170.vpngest.unican.es 1532 s=7,csm=(GSSCSM)
Now, we are trying to add a new instance using DRDA. We have configured the
instance to validate the users against the local users (/etc/passwd) and it
works, but when we try to configure it using PAM or Kerberos with the same
flags we used for onsoctcp, it doesn't work.
We have also done the same with kerberos and it neither works. Reading the
documentation it seems the SSO with kerberos only works with onsoctcp:
"Create an SQLHOSTS entry for the DBSERVERALIASES name that you want to use
for the connection, specifying onsoctcp in the NETTYPE field and
s=7,csm=(GSSCSM) in the OPTIONS field."
Does anybody knows if there is any other way to validate users using kerberos
or LDAP with DRDA? We are using v9.7fp4_nt32 IBM Data Server Driver
Thanks in advanced
Domingo Fernandez
--_000_D462CCD387FD904A87D67122191094330D3845A1mbx01unicanes_