Last modified Feb, 23, 2017
ScaleArc settings for Kerberos

The following chart provides an overview of the ScaleArc settings and their relationship in a Kerberized cluster.

Chart

Cluster status

Is ScaleArc joined as a machine in AD?

During cluster creation (database access)... Following cluster set up... Kerberos (ScaleArc admin)

Keberos
(User) 

NTLM
Non-Kerberized cluster No

Status

The option Use Kerberos for Authentication is unchecked.

 

SQL Authentication Offload OFF
Windows Authentication ON
Kerberos Authentication Offload  OFF

Action

  1. If you try to turn ON Kerberos Authentication Offload you receive a message requesting that you need to first join Windows AD as a machine account.
No No Yes
Fully-Kerberized cluster

Yes

Status

The option Use Kerberos for Authentication is checked by default.

SQL Authentication Offload ON
Windows Authentication ON
Kerberos Authentication Offload  ON
Yes Yes Yes
Partially-Kerberized cluster Yes

Status

The option Use Kerberos for Authentication is unchecked.

Action

  1. Enter username and password.

SQL Authentication Offload OFF
Windows Authentication ON
Kerberos Authentication Offload  OFF

Kerberos Authentication Offload remains OFF as SQL Authentication Offload is OFF in Users & DBs.

 

Yes

No

 

 

 

 

 

 

Yes

 

 

 

 

 

 

  Yes

Action

  1. Select the option Use Kerberos for Authentication.

Action

To turn ON Kerberos Authentication Offload:

  1. Stop the cluster.
  2. Turn ON Authentication Offload iin Users & DBs.
  3. Turn ON Kerberos Authentication Offload.
Yes Yes Yes
On this page

 

 

 

 

Comments

    Add new comment