GSSServiceName

The GSSAPI service name that you want to use for the Query Manipulation Server service. You must specify the GSSAPI service name, instance name (fully qualified host name), and the Kerberos realm (normally the domain name in upper case).

You can also set GSSServiceName to an asterisk (*) to allow clients to authenticate to any service principal in the Query Manipulation Server service's keytab, rather than requiring you to select a single principal.

If you enable GSSAPI authentication, Query Manipulation Server uses this value as the GSSAPI service name to identify itself. You enable GSSAPI authentication by setting the RequireGSSAuth parameter in the appropriate section:

NOTE: You cannot use RequireGSSAuth with GSS ACI encryption (see ACI Encryption Configuration Parameters). If you configure both, Query Manipulation Server does not start. GSS ACI encryption has been deprecated or Query Manipulation Server version 12.6.0 and later.

Type: String
Default:  
Required: No
Configuration Section: Server
Example: GSSServiceName=MYSERVICE/host.example.com@EXAMPLE.COM
See Also: