Providing Kerberos Credentials using a Ticket Cache

Configure Kerberos for the DataStax Enterprise (DSE) clients, including dsetool, DSE FS, DSE Graph, and DSE Spark.

Prerequisites

These steps require MIT Kerberos tools:

Create a Java Authentication and Authorization Service (JAAS) configuration file for the DSE Client as follows:

Use the default filename .java.login.config and put the file in the user’s home directory. Set the DSE client class to com.sun.security.auth.module.Krb5LoginModule and define the variables as follows:
```
DseClient {
   com.sun.security.auth.module.Krb5LoginModule required
   useTicketCache=true
   renewTGT=true;
};
```
Optional: If the JAAS configuration is not in the default location or has a different name, customize the location using on of the following methods:
- Setting the JAAS configuration file location
- Provide the Kerberos login configuration file location using environment variables
Use kinit to get a ticket:

Start kinit:
```
kinit -f <principal_name>
```