Quantcast
Channel: SCN: Message List
Viewing all articles
Browse latest Browse all 8581

Re: Windows AD authentication and SSO

$
0
0

Ronak i hope you read my earlier reply that i was able to login using AD creds. But now i was woking on the SSO piece but it doesnt seem to work : what i have done is created a global.properties file with the following content

 

sso.enabled=true
siteminder.enabled=false
vintela.enabled=true
idm.realm=DOMAIN.INTERNAL
idm.princ=biservice   { does this need to be just the service account name or the whole BICMS/service acct?}
idm.allowUnsecured=true
idm.allowNTLM=false
idm.logger.name=simple
idm.logger.props=error-log.properties
and for testing i opened up tomcat config-->java tan and Added the following lines to Tomcat Java Options:
-Dcom.wedgetail.idm.sso.password=password
-Djcsi.kerberos.debug=true
i cleared the tomcat logs: now when i restarted tomcat i suppose to see in "stdout.log" file the credientials being passed but all i see is
"Comons Daemon Procrun stdout initilized
com.businessobjects.webpath.rebean3ws.Activitor"
the kicker is that when i open stderr.log file and search for "credientials" i see a entry in there saying "jcsi.kerberos :** credientials obtained..**Credientialclient : biservice@INTERNAL.DOMAIN.COMsession key: [18,9e..........] service principal: krbtgt/INTERNAL.DOMAIN.COM@INTERNAL.DOMAIN>COMvalid [ ..]   "
There is more text in the stderr.log for valid till etc. But i dont know why there is an entry on stderr.log and stdout.log and whats the difference between these two logs,
now for Business objects - when i uset he url : https://severname/BOE/CMC  : it takes me to CMC login page , but BI launch pad it generate a huge error as follows:
HTTP Status 500 - com.wedgetail.idm.sso.ProtocolException:com.wedgetail.idm.spnego.server.SPnegoException:com.dstc.security.util.asn1.Asn1Exception:Bad Tag encountered:78"
I looked at a blog and someone mentioned that i should add another entry in the global.properties file
for "idm.s4u=true" but thats doesnt work either.
Please let me know if you have any input for this last SSO piece

Viewing all articles
Browse latest Browse all 8581

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>