DB2 for z/OS Kerberos connections

Use the New Database Connection wizard or pages that are embedded in other wizards to create a JDBC connection to DB2® for z/OS® that uses Kerberos security. This feature is not available in some products.
Before you can connect using this security option, you must complete some setup steps. See the DB2 for z/OS information center and the documentation that was provided with your Kerberos server for detailed information about completing these steps:
  • Set up your Kerberos server realm.
  • Use the kinit command to create a cached TGT.

You can use the IBM® Data Server Driver for JDBC and SQLJ to create connections to DB2 for z/OS servers using Kerberos security. To create Kerberos connections, select "IBM Data Server Driver for JDBC and SQLJ using Kerberos security" in the JDBC driver field of the New Connection wizard.

When you select this option, the workbench ignores any userid or password values in the wizard and passes the JCC driver a null userid and null password. The JCC driver then searches for a cached TGT and uses the TGT to establish the Kerberos connection.

The host name must match a kdc entry under a valid realm in your KRB5.INI file so that the cached TGT is valid for the connection.

You must also fill in the server principal for the REALM/KDC that is defined in your KRB5.INI file.


Feedback