Page tree
Skip to end of metadata
Go to start of metadata

The following chart provides an overview of the ScaleArc settings and their relationship in a Kerberized cluster.

Chart

Cluster status

Is ScaleArc joined as a machine in AD?

During cluster creation (database access)...Following cluster set up...Kerberos (ScaleArc admin)

Keberos
(User) 

NTLM
Non-Kerberized clusterNo

Status

The option Use Kerberos for Authentication is unchecked.

 

SQL Authentication Offload OFF
Windows Authentication ON
Kerberos Authentication Offload  OFF

Action

  1. If you try to turn ON Kerberos Authentication Offload you receive a message requesting that you need to first join Windows AD as a machine account.
NoNoYes
Fully-Kerberized cluster

Yes

Status

The option Use Kerberos for Authentication is checked by default.

SQL Authentication Offload ON
Windows Authentication ON
Kerberos Authentication Offload  ON
YesYesYes
Partially-Kerberized clusterYes

Status

The option Use Kerberos for Authentication is unchecked.

Action

  1. Enter username and password.

SQL Authentication Offload OFF
Windows Authentication ON
Kerberos Authentication Offload  OFF

Kerberos Authentication Offload remains OFF as SQL Authentication Offload is OFF in Users & DBs.

 

Yes

No

 

 

 

 

 

 

Yes

 

 

 

 

 

 

 Yes

Action

  1. Select the option Use Kerberos for Authentication.

Action

To turn ON Kerberos Authentication Offload:

  1. Stop the cluster.
  2. Turn ON Authentication Offload iin Users & DBs.
  3. Turn ON Kerberos Authentication Offload.
YesYesYes
On this page

 

 

 

 

  • No labels