Skip to Content

Kerberos with BI 4.1

We have installed BI 4.1 SP4 on windows server 2008. The authentication is window AD with Kerberos. We would like to know:

1. When a user is trying to log in, using Web Rich Client (WRC), does the WRC first communicate with the BO server or the with windows AD server.

2. In order for AD authentication to work, does the user (client) machine have to be able to resolve the authenticating domain?

We highly appreciate any quick responses on this.

Add a comment
10|10000 characters needed characters exceeded

Related questions

2 Answers

  • Best Answer
    Posted on Aug 17, 2016 at 03:58 PM

    1. It goes through BO server.

    2. You need to put those 2 files in windows directory. bsclogin.conf and krb5.ini

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Aug 17, 2016 at 04:16 PM


    The tool first looks at the settings in krbi5.ini file, then the KDC's defined. It will communicate with KDC using the Service / SSO account



    AD_krbi5.png (19.3 kB)
    Add a comment
    10|10000 characters needed characters exceeded

    • multiple domain and forest AD architecture is suppored in BO and should work.

      check the configuration DOC

      1323391 - What are the requirements to perform SSO or manual authentication from multiple AD forests in XI 3.1 or later

      But for WRC to work with AD krb5.ini and bscLogin is not at all required.

      There is no special setting is required at client machine which is in diffrent domain.

      only try login in WRC with the format


Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.