You can use the IBM® Data Server Driver for JDBC and SQLJ to create connections to DB2 for z/OS servers using Kerberos security. To create Kerberos connections, select "IBM Data Server Driver for JDBC and SQLJ using Kerberos security" in the JDBC driver field of the New Connection wizard.
When you select this option, the workbench ignores any userid or password values in the wizard and passes the JCC driver a null userid and null password. The JCC driver then searches for a cached TGT and uses the TGT to establish the Kerberos connection.
The host name must match a kdc entry under a valid realm in your KRB5.INI file so that the cached TGT is valid for the connection.
You must also fill in the server principal for the REALM/KDC that is defined in your KRB5.INI file.