Skip to Content
author's profile photo Former Member
Former Member

SPNego authentication mode on WAS with ABAP stack

Hi,

I have a Netweaver 2004 installation (java and abap stack). Now I want to configure the SPNego authentication mode on the java stack. Till now, the java stack uses the abap backend to authenticate the users.

Is there a possibility to change the authentication mechanism to spnego? Would there be the possibility on Netweaver 2004s?

Thanks,

Thomas

Add a comment
10|10000 characters needed characters exceeded

Related questions

2 Answers

  • author's profile photo Former Member
    Former Member
    Posted on Jan 24, 2008 at 11:59 AM

    Hi Thomas

    You are a bit short on details, i assume you have a windows active domain and you are trying to set up single sign on to your java stack.

    In this case you can still use the abap ume and configure SSO with SPNego. If your browser can negotiate a kerberos ticket, and your java stack accepts it, you will be fine. However, you will not be able to authenticate users directly from kerberos to ABAP.

    If your windows domain usernames do not match with the SAP usernames, you will have to map them. In most cases the SAP username can be extracted from somewhere in the AD.

    Regards Michael

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Jan 25, 2008 at 03:58 AM

    Thomas,

    With regard to your dual-stack, when installed, if they share the same SID (Java and ABAP were installed as a combined system), I am pretty sure that you cannot break this away from ABAP authentication. One way to tell is if you can goto the UME on the Java Stack, select Configuration, and then hit Modify Settings. Once the screen changes, select the drop-down - here for Dual-Stack, the only option should be ABAP.

    If this answers your question, please set the thread to answered.

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Hi again

      Please ignore my post, i mixed the dual stack thing with the spnego, sorry.

      I only implemented spnego with a enterprise portal (no abap stack there). Additionally we added SS0 from that portal to various other SAP systems (saplogonticket) , which is not quite the thing you wanted.

      Kind regards, Michael

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.