Skip to Content
0
Former Member
Jan 31, 2007 at 01:07 PM

Kerberos/SPNego Authentication between two domains

158 Views

Greetings, we have successfully configured the Windows 2003 Active Directory (KDC) and NW04s SP8 portal to authenticate between two domains i.e. the Window KDC is in ABC.EC.COM and the NW04s Portal is in ABC2.COM.

For some reason when we authenticate from Windows 2003 workstation to the NW04s portal, we are getting a 45 second delay in authenticating straight to the portal.

We have set all the Internet Browser options as specified by SAP documentation. When we click on the IE, we get a UNKNOWN_ERROR from the login window.

But when we perform the same test but using a server logon from the domains above, we are able to authenticate right away to the portal.

I talked to our network guys to see if there may be an issue within the KDC and they could not think of anything. Could it be an issue with the ticket expiration/acceptance??

I am going to do a network monitoring between the two systems to see if anything come up.

Any suggestions would be greatly appreciate.