On 07/26/2012 02:06 AM, jacmarpet wrote:
>
> Hello,
>
> So I'm setting up SSO, so that when a user logs onto their Windows
> machine, and open up their browser and go to the User Application, they
> will automatically be logged in. I have followed the User Application:
> Administration Guide when configuring SSO, and everything went
> smoothly(well, it took about a day). But, it doesn't really work. When i
> go to the User Application(http://URLort/IDM/Kerberos), i get this
> message:
>
> YOU DO NOT HAVE KERBEROS PROPERLY CONFIGURED IN YOUR ENVIRONMENT. YOU
> WILL BE REDIRECTED TO THE USER APPLICATION LOGIN PAGE IN A FEW SECONDS.
> CLICK ON THE FOLLOWING LINK IF THE YOU ARE NOT AUTOMATICALLY
> REDIRECTED:GO TO LOGIN PAGE
> The log from the JBoss server spits out this:
>
> 2012-07-25 15:17:49,628 INFO [STDOUT] (HTTP-0.0.0.0-8180-3) ERROR
> [RBPM] [COM.NOVELL.COMMON.AUTH.SSO.SSOFILTEROFILTER] FAILED TO PER
> FORM SPNEGO KERBEROS V5 SSO.
> *Additional info:*
> I'm using Active Directory as the Kerberos provider.
>
> Jacob Petersen
>
>

Greetings,
A step along the way was either skipped or done incorrectly. Case
matters. In the documented steps, if a value is in Upper Case, it has
to be in upper case.

Also, depending upon what version of the User Application and patch
level it is not necessary any more to add /Kerberos to the URL.

--
Sincerely,
Steven Williams
Lead Software Engineer
NetIQ