Single Sign On Not Working

[Former Member]

Post Author: etalley

CA Forum: Authentication

We are using Crystal Reports Enterprise v9. When a few of our users browse to the crystal reports site it is redirecting them to the logonform.csp page even though single sign on is enabled. Not only that, but when they type in their username and password it's not accepting it. However, most of the other users can access the page without being prompted for a username and password. It is also generating this warning in the event log when the site is accessed by anyone, no matter if they are being allowed to actually log in or not:

Event Source: Crystal_WebCompServerEvent ID: 35302Description: Log message: NT Authorization Required.

I looked up the event ID and found this article: http://technicalsupport.businessobjects.com/KanisaSupportSite/search.do;jsessionid=46C816BCE73274421...

That is EXACTLY the issue we are having, however that article only addresses IIS 6.0. We are using IIS 5.0 on a Windows 2000 server. The application pools are totally different in 5.0. Does anyone know how to fix this?

[Former Member]

Post Author: TAZ

CA Forum: Authentication

It's not needed for IIS 5, IIS 5 already runs under local system by default.

To note the KB you are referring to is not a Microsoft best practice(you'll notice this by the nasty message you get when making the change). If you need to use local system on your web server then you should address the underlying security issues and not just open up everything by using local system instead of network service. Windows temp, and the BO directories need at least read assess for network service, some need write access too.

Regards,

Tim