Error when using Universe 3.x / 4.x and Windows AD authentication

[Former Member]

When I create a new document using a Universe 3.x or 4.x I cannot connect using Windows AD authentication. Using Enterprise and our standard Administrator user it works fine, but with Windows AD the following error is displayed.

Could not connect to Central Management Server (CMS).

Active Directory Authentication failed to log you on.

Please contact your system administrator to make sure you are a member of a valid mapped group and try again. If you are not a member of the default domain, enter your user name as UserName@DNS_DomainName, and then try again.

(FWM 00006)

Is there some extra configuration needed on the Business Objects side? I have no problem using other client tools like Universe Designer or Webi Rich Client from the same PC with the same user. I've tested with 3.x and 4.x systems with the same issue on each.

Thanks.

[Henry_Banks · Accepted solution]

Hi,

Did you configure the .ini file as decribed in the help documentation? http://help.sap.com/businessobject/product_guides/vi01/en/vi1_0_11_user_en.pdf

See section "4.8.1 Connecting to a universe datasource" where it discusses:

"To use the Windows AD authentication mode to connect
to the CMS, append the following two entries in the SAPLumira.ini file located at: <Lumira_Install_Dir>\SAPLumira\Desktop "

Regards,

H

[Former Member · Accepted solution]

Ah yes RTFM, sorry - Or as I used to like to classify support calls like this PBCAK. Problem Between Chair And Keyboard

It's a little bit fiddly for every client user to have to do this when all other BI client tools seem to pull this from the server itself.

Thanks Henry.

[Former Member · Accepted solution]

Hi Henry,

I am running into same issue.

Even after adding two lines

-Djava.security.auth.login.config=C:\Windows\bscLogin.conf

-Djava.security.krb5.conf=C:\Windows\krb5.ini

in SAPLumira.ini on local machine (where Lumira is installed) it's not working for me. Getting same error. Am I missing anything.

I am on the latest Version and Patch - V 1.15.1

This is something which should work out of the box and not end user have to do something like this. Hopefully will be automated in the future release.

Thanks,

Rajan

[Henry_Banks · Accepted solution]

can another BO client tool connect using AD from this machine, and your user, to that CMS?

[Former Member · Accepted solution]

Yes I can connect through WEBI Rich Client via Win AD.

[Former Member · Accepted solution]

Rajan,
Have you seen an update on your issue yet?

//bijan

[Former Member · Accepted solution]

No update yet!

[Henry_Banks · Accepted solution]

Hi,

OK, well there hasn't been a torrent of information from your side, so I supposed we need to start troubleshooting!

1. what's your exact BO backend version? (version + SP + Patch level)
2. is your bscLogin.conf  and/or krb5.ini  actually located under C:\Windows\  ?
3. please enable the bo_trace.ini for the local Lumira client and capture some logs. see note 1782007 - SAP Lumira desktop 1.0: How to trace the application using
   native BO_Trace.ini logs    

i would then recommend you open a new discussion thread, qualifying it clearly from the outset, to include the above additional info.

Regards.

H