We have implemented SSO with EP6.0 SP15, using kerberos for authentication (Active Directory Domain) and LDAP with syncronization. I have been receiving quite a few calls regarding the "Netweaver Login" prompt appearing on the users screen, and some reported that it happens to them more than others. To resolve the login prompt, they either have to log-off from their computers and other just had to Control Alt Delete, or reboot the system.
I have three question:
1. In the UM Configuration: Logon Tickets is set to default (8) hours, what is the impact of changing this to 99 and/or removing it all together?
2. Is there a way to know if there is a timeout session in kerberos? If there is, what is the impact of changing it, or is it even possible?
3. How to avoid the Login prompt from occurring? Since there are many users whom had never encountered this problem, is there any setting in their PC that could be different from another?
4. OK...one more question....Is the portal affeted when the alternitive authentication (let's say NTLM) takes place?