- SAP HANA STUDIO GRANT COMMAND HOW TO
- SAP HANA STUDIO GRANT COMMAND REGISTRATION
- SAP HANA STUDIO GRANT COMMAND PASSWORD
In elevate mode run the following ktpass command: In this step I will now map a service name to my service user created earlier, in case of Hana the format must be respected as use the following syntax in AD to generate it : setspn -S hdb/ WILL\vmhana01 Register Service Principal Name (SPN) in AD Now make a connection test from Hana server by using “kinit” tool I used the command line, but it could also be created from tool in AD :ĭsadd user "cn=vmhana01,OU=hana,DC=will,DC=lab" -pwd -disabled no -pwdneverexpires yes -acctexpires never I’ll create those service in a dedicated OU in to grant necessary administrative privileges The check done with the expected return value, I need now to create a service users in active Directory to represent Hana database which will be map as SPN.
SAP HANA STUDIO GRANT COMMAND REGISTRATION
The registration in AD changed the entry the nf file, add the following lineĪnd make two test with “kinit” and “klist” toolĬreate Hana database service user in Active Directory Run the following command and make sure you have the exact result as below with your information
![sap hana studio grant command sap hana studio grant command](http://2.bp.blogspot.com/-ymDAwaaRBeo/USSfL2XXcUI/AAAAAAAAAGM/fMi-4d0zs1Y/s1600/kuva1.png)
The registration on Linux server done into my AD is the first step, now I need to perform a series of internal check to guaranty a successful configuration. To validate I’ll make two test, I’ll fist make an nslookup from linux server on the my client desktopĪnd the second one is on my client desktop, I’ll ssh my linux server and connect to it with my ad user
SAP HANA STUDIO GRANT COMMAND PASSWORD
Once reached out the administrator password is needed to join the domain, put it and hit “obtain list” to make sure the password is ok Once done, form network service, select “Windows Domain Membership”Īs you can see I did not put “will.lab” but “will” only, then choose the option you want to propagate and hit ok to validate. My ntp server is my Active Directory server Specify the DNS server ip in “Name Servers” and the domain in “Domain search” The necessary configuration can be done by the tools “yast or yast2” or by command line, I will use Yast2 to make it
SAP HANA STUDIO GRANT COMMAND HOW TO
![sap hana studio grant command sap hana studio grant command](https://i.ytimg.com/vi/9UXfpFldMLo/maxresdefault.jpg)
My configuration will be based on a single container database architecture with my internal network.įor my setup I’ll use my lab environment based on VMware, Microsoft Server 2008 R2, SAP Hana Rev 101 on SLES 11 SP3 and Windows 7 Enterprise.ĭisclaimer: For my deployment I’ll issue local certificate with no outside exposure. In my security document part 1, I’ll explain how to configure SAP Hana authentication method based on: