[DOCS-9191] Ops Manager and Cloud Manager Agents Kerberos environment variables Created: 24/Oct/16  Updated: 06/Mar/17  Resolved: 03/Mar/17

Status: Closed
Project: Documentation
Component/s: None
Affects Version/s: None
Fix Version/s: None

Type: Improvement Priority: Major - P3
Reporter: Emilio Scalise Assignee: Anthony Sansone (Inactive)
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Participants:
Days since reply: 6 years, 49 weeks, 2 days ago
Epic Link: C/OM Security
Story Points: 0.5

 Description   

Hi,

The Monitoring, Backup and Automation agents can use two OS environment variables to set specific Kerberos parameters:

  • KRB5CCNAME : the file used for the kerberos cache
  • KRB5_CONFIG : the Kerberos library configuration file

This is something that should be documented in:

Please note that the KRB5CCNAME should be set to different files (one per Agent process) if there are multiple agents running on the same server. If you are running for example a Monitoring Agent and a Backup Agent on a server, they should use different kerberos cache files by using different KRB5CCNAME values.



 Comments   
Comment by Githook User [ 06/Mar/17 ]

Author:

{u'username': u'atsansone', u'name': u'Tony Sansone', u'email': u'tony.sansone@mongodb.com'}

Message: (DOCS-9191): Updating Kerberos options.
Branch: v3.4
https://github.com/10gen/mms-docs/commit/69670a7bde7b1b841b52cf52245e125e90ce2258

Comment by Githook User [ 06/Mar/17 ]

Author:

{u'username': u'atsansone', u'name': u'Tony Sansone', u'email': u'tony.sansone@mongodb.com'}

Message: (DOCS-9191): Updating Kerberos options.
Branch: master
https://github.com/10gen/mms-docs/commit/c6e1a714a29b70baa1168c4b9125b9d0a219283d

Comment by Emilio Scalise [ 09/Feb/17 ]

Hi tony.sansone,

Here are the clarifications you requested on this.

The krb5ConfigLocation should be equivalent to setting the KRB5_CONFIG environment variable.

There is no other way to set a specific Kerberos cache file other than using the KRB5CCNAME environment variable.

Kind regards,
Emilio

Generated at Thu Feb 08 07:57:45 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.