BIX using Kerberos authentication
Hi.
Is there a version of BIX than can be configured for Kerberos authentication for the database connections? We are currently using BIX 7.4.
Pegasystems Inc.
US
According to this: https://community.pega.com/knowledgebase/release-note/using-kerberos-authentication-your-database. It is supported for all Pega 7.x platform. So BIX 7.4 should be configurable using Kerberos authentication.
JP Morgan Chase
US
Thanks Kevin, however the BIX product installation does not utilize the same database authentication mechanisms that are used by PRPC. Per pages 19-21 of the BIX 8.1 User Guide, the prconfig.xml file is used to establish the connection and uses a password key/value (which can be encrypted, but is not a kerberos token). The PRPC installation uses the context.xml file, which has the ability to accept key/value pairs that point to the kerberos database connection like in the example below:
<Resource name="jdbc/PegaRULES" auth="Container" connectionProperties="oracle.net.authentication_services=(KERBEROS5); oracle.net.kerberos5_mutual_authentication=true; oracle.net.kerberos5_cc_name=/tmp/krb5cc_163828" driverClassName="oracle.jdbc.OracleDriver" type="javax.sql.DataSource" initialSize="25" maxTotal="100" maxIdle="30" maxWaitMillis="10000" url="jdbc:oracle:thin:@<some_server>:<some_port>/<some_schema>" validationQuery="SELECT 1 FROM DUAL" />
Thanks Kevin, however the BIX product installation does not utilize the same database authentication mechanisms that are used by PRPC. Per pages 19-21 of the BIX 8.1 User Guide, the prconfig.xml file is used to establish the connection and uses a password key/value (which can be encrypted, but is not a kerberos token). The PRPC installation uses the context.xml file, which has the ability to accept key/value pairs that point to the kerberos database connection like in the example below:
<Resource name="jdbc/PegaRULES" auth="Container" connectionProperties="oracle.net.authentication_services=(KERBEROS5); oracle.net.kerberos5_mutual_authentication=true; oracle.net.kerberos5_cc_name=/tmp/krb5cc_163828" driverClassName="oracle.jdbc.OracleDriver" type="javax.sql.DataSource" initialSize="25" maxTotal="100" maxIdle="30" maxWaitMillis="10000" url="jdbc:oracle:thin:@<some_server>:<some_port>/<some_schema>" validationQuery="SELECT 1 FROM DUAL" />
The same functionality would have to be provided for in the prconfig.xml, which there may be, but the key/value specifications need to be provided.