Passing Kerberos Authentication to DB Connector Node

[Nick40]

OS: Windows 10

KNIME version 4.3.1

SQL driver: 6.0

Hello,

I’m having trouble getting Kerberos authentication to pass through to the ‘DB Connector’ Node.

I’m able to make a connection to the DB using the node not using Kerberos authentication. If I manually input my credentials within the node I’m able to connect:

The connection string looks like so (actual info removed):

jdbc:compositesw:Server:port?domain=domain&dataSource=dataSource&currentSchema=currentSchema>

Connection is established.

Now using Kerberos:
I have Kerberos enabled and connected:

I adjust the node to user Kerberos:

Attempting to execute, node fails with a ‘Missing Password’ message in the console.

After some research, I’ve tried adding some parameters to the connect string:

‘……integratedSecurity=true&authenticationScheme=JavaKerberos&EncryptionMethod=ssl’

I’ve also tried adding these as ‘JDBC Parameters’ in the tab in the node. Neither approach has worked.

Any suggestions/ideas would be greatly appreciated.

Cheers,
Nick

[wkhan]

Hi @Nick40

Thanks for posting, and welcome to the forum! By chance did you log-in to Kerberos at the bottom-right of the Analytics platform as described near the bottom of this section:Kerberos User Guide

If that is working would it be possible to check if there are any errors, or connection is being established in the Kerberos logs?
https://docs.knime.com/2020-12/analytics_platform_kerberos_user_guide/index.html#debug

Regards,
Wali Khan

[tobias.koetter]

Hi Nick40,
according to the jdbc url I assume you want to connect to a TIBCO Data Virtualization instance. Looking at the documentation I found it doesn’t seem like the JDBC driver does support Kerberos. Can you check back with the TIBCO support if this is the case or if not which parameters need to be set to use Kerberos in the JDBC driver.
Thanks
Tobias

[Nick40]

Thanks @wkhan

Yes, I can confirm that I did login/authenticate into Kerberos

I don’t personally have access to our Kerberos system, but am meeting with someone today who may be able to do some checking for me, in terms of logs. I’ll let you know what I find.

Cheers,
Nick

[Nick40]

Thanks @tobias.koetter

I’ll review this documentation and will reach out to Tibco to see what suggestions they have. I’m also trying to use a newer SQL version driver (9.2), but am having trouble getting the connect string to work correctly (not using Kerberos). The connect string format from version 6 to 9 is quite different. I’ll keep you posted on my progress.

Cheers,
Nick

[Nick40]

Resolved.

After adding to 2 more components to the string:

jdbc:…&authenticationMethod=Kerberos&kerberosspn=HTTP/xxxxx@.xxxx.com

We needed to add the ‘authenticationMethod’ and ‘kerberosspn’ parameters. We are now able to pass credentials to the DB Connector Node.