Creating the Repository Administrator User in the Native Security Domain

Creating the Repository Administrator User in the Native Security Domain

For DAC to be able to access Informatica and perform tasks in pmcmd and pmrep command line programs, DAC must log in to Informatica as an Informatica Repository Administrator user. This user must be configured in the native security domain.
You need to create such a Repository Administrator user, or, if your security policies allow, you can use the default Administrator user (whose privileges include Repository administration) for DAC connectivity to Informatica.
For more information on creating users and Informatica security domains, see the Informatica documentation.
To use the default Administrator user in the native security domain

1. Log in to Informatica Administrator as Administrator.
2. Click the Configure Security icon in the top, right corner of the Informatica Administrator work area to display the Security tab.
3. In the Users area, expand the Native directory and select Administrator.
   Note: Do not select an existing user from an LDAP domain.
4. Click the Privileges tab, and make sure that the correct Domain and Repository Service are selected.
5. Click OK.

To create a new Repository Administrator defined in the native security domain

1. Log in to Informatica Administrator as Administrator.
2. In the Users area, click Actions, then Create User to display the Create User dialog.
   Note: Do not create this user in an LDAP domain.
3. Use the Create User dialog to specify the user details, then click OK.
4. In the Users area, select the new user, click the Privileges tab, then click Edit to display the Edit Roles and Privileges dialog.
5. Use the Roles tab and Privileges tab to select the appropriate Domain and Repository Service.
6. Click OK.

Setting the Data Movement Mode

You must set the data movement mode appropriately in the Informatica Integration Service.
To configure the data movement mode

1. Log in to Informatica Administrator.
2. Select the appropriate Integration Service.
3. Select the Properties tab.
4. In the General Properties area, click Edit.
5. Use the DataMovementMode drop down list to specify either ASCII or Unicode, then click OK to save the change.

Encrypting Passwords When DAC Interacts With Informatica

DAC sends the Informatica Integration Service and Repository Service passwords un-encrypted when communicating with Informatica through pmcmd and pmrep commands. This section includes instructions for forcing password encryption.
To force password encryption
In the examples included in the following procedure, the Informatica Integration Service and Informatica Repository Service use the password Administrator.

1. Open a command window and type the following command to create an encrypted Informatica password for pmcmd and pmrep
pmpasswd Administrator -e CRYPT_SYSTEM
   This step will produce something similar to the following text:
   

   Informatica PowerMart Encryption Utility, 32-bit
   Copyright (c) Informatica Corporation 1996-2008
   All Rights Reserved
   

   Encrypted string 
   –>dMGpMvpsuQwXD5UvRmq0OZxhppTWK0Y7fzBtxHL04Gg=<–
   Will decrypt to –>Administrator<–
   

2. Create a new environment variable with the following properties.
   Name– INFA_PASSWORD (Or any name that you choose.)
   Value– dMGpMvpsuQwXD5UvRmq0OZxhppTWK0Y7fzBtxHL04Gg=
   Note: The value should be exactly as shown in the encrypted message in the Command window (the value between --> and <--).
3. Modify the file <DAC_Config_Location>\conf-shared\infa_command.xml by replacing all occurrences of <-p> with <-pv> and <-x> with <-X>.
4. Stop the DAC Server.
5. In DAC, go to the Setup view, and select the Informatica Servers tab.
6. Select the appropriate Informatica Service record and enter the name of the environment variable that you created in step 2 of this procedure as the value in the Password field. Save the record.
7. Repeat step 6 for the Informatica Repository Service.
8. Close and re-open the DAC Client to test the connections.
9. If the DAC Server is located on the same machine, start the DAC Server and run an execution plan.
10. Verify that DAC issues the following pmcmd command.
    

    pmcmd startworkflow -sv BI_DW_Server -d <Domain> -u Administrator -pv **** -f
    <folder> -lpf <filename><workflow>
    INFORMATICS TASK:<workflow> has finished execution with Completed status.
    

11. If the DAC Server is on a different Windows machine, do the following:
    
    1. Set the environmental variable on the server machine and modify the <DAC_Config_Location>\conf-shared\infa_command.xml.
    2. Shut down the DAC Server when testing Informatica connectivity or unit testing a DAC task using the DAC Client.
12. If the DAC Server is on a non-Windows machine, do the following:
    
    1. Set the environmental variable on the server machine and modify the <DAC_Config_Location>\conf-shared\infa_command.xml.
    2. Shut down the DAC Server when testing Informatica connectivity or unit testing a DAC task using the DAC Client