ScaleArc settings for Kerberos

Last modified May, 10, 2017

ScaleArc settings for Kerberos

The following chart provides an overview of the ScaleArc settings and their relationship in a Kerberized cluster.

Chart

Cluster status	Is ScaleArc joined as a machine in AD?	During cluster creation (database access)...	Following cluster set up...	Kerberos (ScaleArc admin)	Keberos (User)	NTLM
Non-Kerberized cluster	No	Status The option Use Kerberos for Authentication is unchecked.	SQL Authentication Offload OFF Windows Authentication ON Kerberos Authentication Offload OFF Action If you try to turn ON Kerberos Authentication Offload you receive a message requesting that you need to first join Windows AD as a machine account.	No	No	Yes
Fully-Kerberized cluster	Yes	Status The option Use Kerberos for Authentication is checked by default.	SQL Authentication Offload ON Windows Authentication ON Kerberos Authentication Offload ON	Yes	Yes	Yes
Partially-Kerberized cluster	Yes	Status The option Use Kerberos for Authentication is unchecked. Action Enter username and password.	SQL Authentication Offload OFF Windows Authentication ON Kerberos Authentication Offload OFF Kerberos Authentication Offload remains OFF as SQL Authentication Offload is OFF in Users & DBs.	Yes	No	Yes
		Action Select the option Use Kerberos for Authentication.	Action To turn ON Kerberos Authentication Offload: Stop the cluster. Turn ON Authentication Offload iin Users & DBs. Turn ON Kerberos Authentication Offload.	Yes	Yes	Yes

On this page

Comments

Add new comment