Kerberos requirements

Prerequisites

Basic requirements prior to the configuration:

• MIT Kerberos 1.4.4 KDC

• Kerberos REALM name

• Global Kerberos principal name (specified without trailing @REALM name)

• Global Kerberos principal keytab data encoded as a base 64 string

• KDC hostnames and port numbers (one or more in priority list order)

Environment requirements

The following hosts and software versions are required: 

• A source host with the following configuration:

  • A running SAP ASE, Oracle, or DB2 instance.

  • A database to link from and its corresponding full database dump. 

  • The Delphix principal is able to access the SAP ASE instance and SSH onto the host as per our product documentation (see Requirements for SAP ASE).

  • The credential cache for the Delphix principal is populated and kept current. The environment variable KRB5CCNAME is set to the location for a credential cache. Login to the Adaptive Server via "isql_r64 -V -R<remote_server_principal> -S<servername>" or "isql_r -V -R<remote_server_principal> -S<servername>" or otherwise make sure that "isql" points to either "isql_r64 or isql_r" so that "isql -V -R<remote_server_principal> -S<servername>" works.

• A staging host with the following configuration:

  • A running SAP ASE, Oracle, or DB2 instance with the same version as the source instance.

  • The Delphix principal is able to access the SAP ASE instance and SSH onto the host as per our product documentation (see   Requirements for SAP ASE  ).

  • The credential cache for the Delphix principal is populated and kept current. The environment variable KRB5CCNAME is set to the location for a credential cache. Login to the Adaptive Server via "isql_r64 -V -R<remote_server_principal> -S<servername>" or "isql_r -V -R<remote_server_principal> -S<servername>" or otherwise make sure that "isql" points to either "isql_r64 or isql_r" so that "isql -V -R<remote_server_principal> -S<servername>" works.

• A target host to create a VDB on. Configuration details:

  • A running SAP ASE, Oracle, or DB2 instance with the same version as the source instance.

  • The Delphix principal is able to access the SAP ASE instance and SSH onto the host as per our product documentation (see  Requirements for SAP ASE     ).

  • The credential cache for the Delphix principal is populated and kept current. The environment variable KRB5CCNAME is set to the location for a credential cache. Login to the Adaptive Server via "isql_r64 -V -R<remote_server_principal> -S<servername>" or "isql_r -V -R<remote_server_principal> -S<servername>" or otherwise make sure that "isql" points to either "isql_r64 or isql_r" so that "isql -V -R<remote_server_principal> -S<servername>" works.

Supported databases and Kerberos configurations

For detailed Kerberos support please refer to Kerberos Support Matrix.

Delphix Engine 5.3.2.0 is the first generally available customer release to support Kerberos on a subset of supported OS' with SAP ASE, Oracle, and DB2 databases.