Skip to Content
0

Issue in BI 4.2 SP3 with manual AD authetication

Oct 17, 2016 at 02:26 PM

1.1k

avatar image
Former Member

Hello,

I'm facing an issue in implemenntation of manual WinAD authentication with SAP BI 4.2 SP2 installation with Tomcat 8 :

-Every configuration files seems ok

-kinit is ok

-manual ad authentication on rich client and ccm is ok

and on Bi Lauchpad i have this error:

Informations de compte non reconnues : L'authentification Active Directory n'a pas pu vous connecter. Veuillez contacter votre administrateur système pour vous assurer que vous êtes membre d'un groupe mappé correct et essayez de nouveau. Si vous n'êtes pas membre du domaine par défaut, saisissez votre nom d'utilisateur sous la forme NomUtilisateur@NomDomaine_DNS et réessayez. (FWM 00006)

When i checked the stdout.log, it's empty. When i check the log files in

C:\Users\MyUSER\SBOPWebapp_BIlaunchpad_IP_PORT_8080 i find this error:

"Authentication failed. unable to find LoginModule class: com.sun.security.auth.module.krb5LoginModule"

When i try to connect to my CMS with the Bi Lauchpad of an other platform, manual AD loginn Works fine.

I have no idea, if you can help me?

Thanks in advance.

Roger

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

3 Answers

Manikandan Elumalai Oct 17, 2016 at 03:35 PM
0

Look like its an issue with your JDK version. Which version of JDK you are using ? Is it Sun or ibm. I would suggest you to compare it with your working environment.

Thanks

Mani

Show 1 Share
10 |10000 characters needed characters left characters exceeded
Former Member

It is the same Java version who is running on my working environment. It's Sun java 1.8.0_101.

0
Ajay Gupta Oct 17, 2016 at 04:05 PM
0

Roger-Henri,

If you have confirmed the KINIT command work then the issue could be with your krbi5.ini settings.

Some options to consider

Pre Win2k12 krbi5.ini options:

default_tgs_enctypes = rc4-hmac
default_tkt_enctypes = rc4-hmac

Post Win2k12 krbi5.ini options:

default_tgs_enctypes = aes128-cts-hmac-sha1-96
default_tkt_enctypes = aes128-cts-hmac-sha1-96

Regards,

Ajay

Show 1 Share
10 |10000 characters needed characters left characters exceeded
Former Member

Hello Ajay,

I try your solution but is not working.

0
avatar image
Former Member Oct 18, 2016 at 08:22 AM
0

I made a repair, that not solve my problem.

I un-deployed and deployed again my webapps with Wdeploy tool, same results. Ii'm facing the same error message :

"Authentication failed. unable to find LoginModule class: com.sun.security.auth.module.krb5LoginModule"

Any ideas?

Thanks in advance

Share
10 |10000 characters needed characters left characters exceeded