Support for Kerberos to Connect to database

Kamate, Vikram shared this idea 2 months ago
Idea Logged

Hi,

Does Yellowfin support for connecting to database using Kerberos?


Requirement is that all components connecting to a database without using user name and password for authentication. In the case of Oracle database this means using Kerberos.

If supported then please provide Yellowfin version where it is supported and any documneted steps for same.


Thanks,

-Vikram

Comments (8)

photo
1

Hi Vikram,


Thank you for reaching out to us on this. Speaking with the team this does not appear to be supported at this time, however I have moved this to an Idea to be looked at in the future. Before becoming a request, ideas will be reviewed by our Product Team and chosen for Enhancements based on feasibility, level of positive impact to the user experience, and votes from the community. This post will be updated with any future information relevant to this process.


Cheers,

Neal

photo
1

To elaborate on the requirement mentioned above - this is a datacenter entry requirement for a very large financial institution whom have already found value in the solution in test. However, without this capability, they cannot move to production usage.

photo
1

Hi Dennis,


Thank you for the extra clarity. I have noted this on the task for this enhancement and will keep you updated as this is reviewed for potential inclusion into a future release.


Cheers,

Neal

photo
1

Hi Neal,

Does Yellowfin provides support to access database credentials through CyberArk Password Vault?

Or any other alternate solution that Yellowfin can offer?


Thanks,

-Vikram

photo
1

Hi Vikram,

Thank you for your patience. I have checked in on this and there is not a function for this. I will keep you posted on any updates that might come from the Kerberos idea.

Cheers,

Neal

photo
1

Hi Vikram,

Is this for the Yellowfin ConfigDB or the Datasource? The proposed solution is:

  • Yellowfin will provide a way to add a Kerberos configuration file (krb5.conf) and use it to connect to the Oracle DB
  • For DataSources, the password field will be replaced with a file upload box. The file will be stored in the Yellowfin configDB.
  • For the ConfigDB, there will be an additional init param in the web xml, where the path to the config file may be specified

Does this cover your requirements? Kerberos setup and configuration is outside the scope of this enhancement. Can you provide us with a test environment where things are set up they way you want it to work? This will help us identify instance-specific issues early in the dev cycle.


Regards,

Deepak Narayan

photo
1

This looks good, however I think these options are at UI level and does that mean we will have equivalent API as well?


We create datasource connection using Yellowfin API, hence we need same (Datasource CURD and Test) operations available at Yellowfin API.

Thanks,

-Vikram

photo
1

Hi Vikram,

Just letting you know I have updated the task with your feedback and either myself or our developers will come back to you with their response.

Cheers,

Neal