[debashishsaha004]

https://community.denodo.com/docs/view/document/Virtual%20DataPort/Denodo%205.5/Virtual%20DataPort%20Administration%20Guide

page no 313 .. using this I have setup my configuration.

May be this will give you a deeper and clear view.

[rareddy]

Teiid Designer tool does not support the automatic kerberos login, so you would have to setup the ticket as described in your link with tableu link and create the keytab file, which is used in the server configuration, have you done that?

[debashishsaha004]

I have MIT kerberos ticket client by which using server principal I can get a ticket like the tableau link I provided.yes I did the same.

I also have the keytab file associated with that principal

[rareddy]

Looking back at your configuration you need to use "host" as security domain on your data source, not MYCOMPANY.COM.

[debashishsaha004]

<security-domain name="abc" cache-type="default">

                    <authentication>

                        <login-module code="Kerberos" flag="required">

                            <module-option name="storeKey" value="true"/>

                            <module-option name="useKeyTab" value="true"/>

                            <module-option name="principal" value="host/[e-mail]"/>

                            <module-option name="keyTab" value="...path to /a3000053.keytab"/>

                            <module-option name="doNotPrompt" value="true"/>

                            <module-option name="debug" value="false"/>

                        </login-module>

                    </authentication>

                </security-domain>

Only this security module ???

[debashishsaha004]

Here is the server log

[debashishsaha004]

https://access.redhat.com/documentation/en/red-hat-jboss-data-virtualization/6.3/single/security-guide/#chap-Data_Source_Security

rareddy shawkins can you guys please have a look at this url.Should we consider this document for solving this problem statement.

[rareddy]

Use "abc" as security domain in your data source configuration. If you want attach standalone-teiid.xml file for me take look at.

[debashishsaha004]

yes .. here I am writing abc .but actually in standalone.xml I have host as name for the security domain.

So I used host

[rareddy]

Set "debug" module option to true and post the debug log.

[debashishsaha004]

[debashishsaha004]

same log .. actually I modified debug =true as hawkins adviced me before.but result is exactly like the attached with my previous reply

[rareddy]

That does not sound right, typically there is lot more verbose log. Do you have properties like

    <system-properties>

        <property name="java.security.krb5.conf" value="/etc/krb5.conf"/>

        <property name="java.security.krb5.debug" value="true"/>

        <property name="javax.security.auth.useSubjectCredsOnly" value="false"/>

    </system-properties>

in your standalone-teiid.xml file right after <extensions> element? krb5.conf point to your KDC settings.

[debashishsaha004]

I dont have this type of setting .

Should I add system properties ..can you please give a bit more detail what are the parameters do I need to add

[rareddy]

See Kerberos support through GSSAPI · Teiid Documentation "Required System Properties on Server" section. Also an example krb5.conf file at How to implement Kerberos authentication with Teiid over JDBC