The GSSAPI service name that you want to use for the Enterprise Vault Connector service. You must specify the GSSAPI service name, instance name (fully qualified host name), and the Kerberos realm (normally the domain name in upper case).
You can also set GSSServiceName
to an asterisk (*
) to allow clients to authenticate to any service principal in the Enterprise Vault Connector service's keytab, rather than requiring you to select a single principal.
If you enable GSSAPI authentication, Enterprise Vault Connector uses this value as the GSSAPI service name to identify itself. You enable GSSAPI authentication by setting the RequireGSSAuth
parameter in the appropriate section:
[Server]
RequireGSSAuth[Service]
RequireGSSAuthYou cannot use RequireGSSAuth
with GSS ACI encryption (see ACI Encryption Configuration Parameters). If you configure both, Enterprise Vault Connector does not start.
Type: | String |
Default: | |
Required: | No |
Configuration Section: | Server |
Example: | GSSServiceName=MYSERVICE/host.example.com@EXAMPLE.COM
|
See Also: |
|