TEIID-4183

teiid · May 10, 2016 · 109ce0c · 109ce0c
1 parent 17bf7b0
commit 109ce0c
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/security/Data_Source_Security.adoc b/security/Data_Source_Security.adoc
@@ -112,7 +112,12 @@ In the datasource configuration, instead of supplying the userid/pasword you nee
 </datasource>
 ----
 
-NOTE: This security domain only should be used as data source security domains, not as generic purpose security domain.
+NOTE: This security domain only should be used as data source security domains in pass-through scenarios, not as generic purpose security domain.
+
+TIP: When working with Kerberos/GSS security token (GssCredential), some JDBC drivers (MS-SQLServer) upon close of the connection they invalidate the GssCredential security token, to avoid accidental invalidation, add an option to above security-domain's login-module configuration to wrap the passed in security token by adding below configuration
+----
+<module-option name="wrapGSSCredential" value="true"/>
+----
 
 
 == Translator Customization