Denodo - Connecting to Denodo Using DBeaver

DBeaver Community Edition is the U-M recommended SQL client for use with Denodo. Follow the instructions below to configure DBeaver using Kerberos authentication with supplied username/password (not Single Sign-On).

Configuring DBeaver (Windows & Mac)

1. The latest version of DBeaver contains a pre-configured Denodo 8 driver; however, DBeaver will prompt you to initiate the driver file download. This approach simplifies the configuration compared to previous versions.
2. Navigate to Database > New Database Connection and select the Denodo 8 database driver. Note: Ensure the All tab on the left is selected in order to view the full list of available drivers.
3. Click Next.
4. On the Main tab, enter the following values: 
   • Host: denodo.it.umich.edu
   • Default Port: 9999
   • Default Database: gateway
   • User: your user name
   • Password: your Kerberos password 

5. Click the Driver properties tab: 
   • You are prompted to download the Denodo 8 JDBC driver. Click Download to proceed.
   • Set the following values on the Driver properties tab:
     • ssl: true
     • useKerberos: true
     • useTicketCache: false

6. Click Test Connection. If successful, the following dialog box displays. Click OK.

• If the test is unsuccessful, an error message displays. Common errors and their fixes are: 
  • Error message: connection error: denodo.it.umich.edu
    • Fix: Enter the correct host name, port number, and ensure you’re on VPN if remote.
  • Error message: Error authenticating client with kerberos: Pre-authentication information was invalid (24)
    • Fix: Enter correct username/pw
  • Error message: authentication error: Database 'xxxxxxx' not found
    • Fix: Enter a valid database name to which you have access

7. Click Finish.
8. Expand the connection in the left navigation panel to open the Views folder.

9. Navigate to SQL Editor > New SQL Editor and write your query.

For any tables outside of the database specified in the connection, prefix them with their database name. For example, you specified gateway in your connection but you need to query the calendar table from dw_time_and_labor. Your query would look as follows:

SELECT * FROM dw_accounts_receivable.account_tbl

Additional Mac Installation Instructions

If Kerberos authentication does not work in step 6 after completing the installation instructions above, follow the steps below. Make sure DBeaver is not running before starting.

1. Open dbeaver.ini located at /Applications/DBeaver.app/Contents/Eclipse.
2. Add the following three lines to the end of dbeaver.ini, replacing XXXXXXX with your username:
   • -Djavax.security.auth.useSubjectCredsOnly=false
   • -Dsun.security.krb5.debug=true
   • -Djava.security.krb5.conf=/Users/XXXXXXXX/DBeaver/krb5.ini
3. Create a krb5.ini file in /Users/XXXXXXXX/DBeaver/krb5.ini with the following content:

[libdefaults]
 dns_lookup_realm = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true
 rdns = false
 default_ccache_name = KEYRING:persistent:%{uid}

 default_realm = ADSROOT.ITCS.UMICH.EDU
[realms]

 UMICH.EDU = {
  kdc = kerberos-1.umich.edu
  kdc = kerberos-2.umich.edu
  kdc = kerberos-3.umich.edu
  kdc = kerberos-4.umich.edu
  admin_server = kerberos-admin.umich.edu
 }

 ADSROOT.ITCS.UMICH.EDU = {
   kdc = adprod-dc-m1.adsroot.itcs.umich.edu:88
   kdc = adprod-dc-m2.adsroot.itcs.umich.edu:88
   kdc = adprod-dc-n1.adsroot.itcs.umich.edu:88
   kdc = adprod-dc-n2.adsroot.itcs.umich.edu:88
   kdc = adprod-dc-s1.adsroot.itcs.umich.edu:88
   admin_server = adprod-dc-m1.adsroot.itcs.umich.edu:88
   default_domain = umich.edu
 }

[domain_realm]
 umich.edu = UMICH.EDU
 .umich.edu = UMICH.EDU
 adsroot.itcs.umich.edu = ADSROOT.ITCS.UMICH.EDU
 .adsroot.itcs.umich.edu = ADSROOT.ITCS.UMICH.EDU