Caché Installation Guide - InterSystems Documentation

Preparing for Caché Advanced Security
On OpenVMS, the file is cache.keytab and is located in the manager’s directory.
• It is owned by the user that owns the Caché installation and the group cacheusr.
• On UNIX and Mac, its permissions are 640; on OpenVMS, its permissions are
[S:RWD,O:RWD,G:R,W:].
D.1.7 Testing Kerberos KDC Functions
When using Kerberos in a system of only non-Windows servers and clients, it is simplest to use a
native UNIX-based or OpenVMS KDC rather than a Windows domain controller. (Tru64 UNIX,
however, can only use the Windows domain controller for KDC functionality.) Consult the vendor
documentation on how to install and configure the KDC; these are usually tasks for your system
administrator or system manager.
When installing Kerberos, there are two sets of software to install:
• The KDC, which goes on the Kerberos server machine.
• There also may be client software, which goes on all machines hosting Kerberos clients. This set
of software can vary widely by operating system. Consult your operating system vendor documentation
for what client software exists and how to install it.
After installing the required Kerberos software, you can perform a simple test using the kadmin, kinit,
and klist commands to add a user principal to the Kerberos database, obtain a TGT (ticket-granting
ticket) for this user, and list the TGT.
Once you successfully complete a test to validate that Kerberos is able to provide tickets for registered
principals, you are ready to install Caché.
D.2 Initial Caché Security Settings
During installation, there is a prompt for one of three sets of initial security settings: Minimal, Normal,
and Locked Down. This selection determines the initial authorization configuration settings for Caché
services and security, as shown in the following sections:
• Initial User Security Settings
• Initial Service Properties
If you select Normal or Locked Down for your initial security setting, you must provide additional
account information to the installation procedure. If you are using Kerberos authentication, you must
select Normal or Locked Down mode. See the User Account Configuration section for details.
116 Caché Installation Guide