UserPrincipal was added to the pxRequestor page for access by REST connectors or fetching LDAP credentials in 7.2.2. 

Sample PRCustom scheme was provided for use by customers in 7.2.2. 

in 7.1.9 , you can use kerberos credentials for login to PRPC but cannot cascade them for downstream services. 

Hi All,

As per the pega 7.1.9 installation guide, while installing we need to enable kerberos at database side. But we didnt enable this as it is a optional. Can we now enable this Kerberos after installation of pega.

Please find the attached relavant screen shots.

Thanks,

Arjun.

If you setup your datasource(PegaRULES jndi) to use kerberos principal and configure it in prconfig, it should work since jdbc will take care of the connection.

"But we are not receiving the credentials in request header"  - This apparently means that kerberos token is not coming to tomcat server itself.

You need to look at your kerberos configuration and troubleshoot accordingly.

I have configured Kerberos with WLS and I assume there won't be a lot of difference with Tomcat configuration.

I have listed the ways to troubleshoot kerberos issues on my website

http://weblogic-wonders.com/weblogic/2010/01/07/troubleshooting-kerberos-issues-with-weblogic-server/

You need to enable kerberos debug on tomcat and look at the logs. You can paste/upload your logs here if you want me to check.

Regards,

Faisal