Tableau Desktop as JDBC Client

Configuration

The configuration for Tableau Desktop as a JDBC client differs from most JDBC clients because the necessary configuration options cannot be passed directly as Java VM options to Tableau Desktop using a start script or a configuration file.

Hence, for Tableau Desktop, the options are configured using the environment variable JAVA_TOOL_OPTIONS and by direct configuration in a configuration file of the embedded Tableau Desktop Java.

Tableau JDBC Connector

For full Kerberos authentication in Tableau, please do not use the CData Virtuality connector provided in the Tableau Extension Gallery. Instead, download and use this version of the connector. Install the connector in the same way as the version from the Tableau Extension Gallery. Please note that you cannot use both versions of the connector in parallel on the same system.

`JAVA_TOOL_OPTIONS`

The first part of the configuration is provided as the system environment variable JAVA_TOOL_OPTIONS:

TEXT

-Djavax.security.auth.useSubjectCredsOnly=false 
-Dsun.security.jgss.native=false 
-Djava.security.krb5.realm=<...>
-Djava.security.krb5.kdc=<...>

Please note that <realm> is the name of your Kerberos realm.

Here is an example:

TEXT

-Djavax.security.auth.useSubjectCredsOnly=false 
-Dsun.security.jgss.native=false 
-Djava.security.krb5.realm=KRBTEST.DV
-Djava.security.krb5.kdc=DC01.KRBTEST.DV

`java.security`

The second part of the configuration is provided in the Tableau Desktop Java configuration file java.security located in C:\Program Files\Tableau\Tableau <version>\bin\jre\conf\security.

Within this file, search for # Default login configuration file and specify the location of the dvclient.conf file by adding a line as shown below (please note that the path separator must be a forward slash):

TEXT

#
# Default login configuration file
#
#login.config.url.1=file:${user.home}/.java.login.config
login.config.url.1=file:[drive]:/path/to/dvclient.conf

Here is an example:

TEXT

#
# Default login configuration file
#
#login.config.url.1=file:${user.home}/.java.login.config
login.config.url.1=file:C:/datavirtuality/dvclient.conf

The mandatory steps for all JDBC clients participating in Kerberos authentication are described here.