Creating a keytab file for the Kerberos service account (using the ktpass.exe command from the bundled JDK)
This method of creating a keytab file uses the
ktpass.exe command that is included with the bundled JDK.
Procedure
On the computer where
Spotfire Server is installed, execute the following command:
> ktab -k spotfire-database.keytab -a <database account name>, replacing the <database account name> with the user login name of the
Spotfire database account, written in lowercase letters.
Note: All values are case sensitive.
Note: It is not critical to use the name "spotfire‐database.keytab" for the keytab file, but the following instructions assume that this name is used.
The tool prompts you for the password of the service account.
Enter the password that you used when creating the
Spotfire database account.
Verify the created keytab by running the
klist and
kinit utilities:
Copy the
spotfire-database.keytab file to the
Spotfire Server directory
<installation dir>\jdk\jre\lib\security (Windows) or
<installation dir>/jdk/jre/lib/security (Unix).
Note: Because this file contains sensitive information, it must be handled with care. The file must not under any circumstances be readable by unauthorized users.
Note: If you change the password of the Kerberos service account, you must re-create the keytab file.