Skip to Content
0
Former Member
Oct 10, 2006 at 07:22 PM

Configuring SSO auth via KDC (Unix MIT Kerberos) and J2EE (SPNego)

107 Views

Hi All,

I am trying to make the following configuration work :

SSO communication between users authenticvated thru Unix KDC (MIT Kerberos) and SAP J2EE (NW04 SP16, IBM JDK) via SPNego module. UME is configured to use R3_RW (ABAP) as a users DataSource.

I made all configuration as per help.sap.com and OSS note 935644 but it's still not working. When I am trying to open any of the J2EE application I see that J2EE is trying to authenticate the user via SPNEGO but unsuccessfully all the time. I am getting the following messages in the defaulttrace :

1) INFO:

Creating new instance of SpNegoState ([gsscontext = [not printable], negstate = undefined, oid = [null]])

2) DEBUG:

Login module com.sap.security.core.server.jaas.SPNegoLoginModule from authentication stack ticket does not authenticate the caller.

I have only one general question if the Unix MIT Kerberos v5 supported KDC for SPNEGO config on SAP J2EE ? (I saw only references to Microsoft ADC)

Thanks and regards,

Mike