SPNego - Login Screen Appears for IE Browser in Some machines.

[Former Member]

Hi,

We've done the SPNEGO Implementation for Portal SSO.

All the settings related to KDC in AD server, Portal WAS and IE browser client settings have been done.

In most of the machines with WINDOWS XP SP2, portal login screen is not getting appeared in IE and so SPNEGO is working fine.

But in few machines with WINDOWS XP SP2, portal login screen appears although the IE client setting like adding the portal url in Security Local Intranet, enabling integrated windows authothentication, enabling automatic logon in intranet zone is done.

We have even followed the SAP Note 934138 and installed Microsoft hotfix KB899587, but still some machines with Windows XP SP2 are facing this issue.

Thanks,

Regards,

Aditya Metukul

[Former Member]

Aditya,

Kerberos on AD is all about SPNs (service principal names).

Check in AD that SPN attributes are correct for the workstations, which have problems with the login.

Regards,

Slava

[Former Member]

HI Aditya,

This might be due to proxy settings. Go to your IE -> Tools-> Internet Options -> Connections ->LAN settings -> If you are using Proxy settings then go to Advanced tab -> and add the portal URL under "Do not use Proxy servers for address beninging with".

Regards

Deb

Edited by: Debasish Sarkar on Dec 8, 2008 7:20 PM

[Former Member]

Hello,

I would suggest you to install webdiagtool to narrow down your problem.

Here are the SAP Note you would like to refer:

968191 - SPNego: Central Note

982044 - SPNego succeds but overall logon fails

716604 - Access to Sun J2SE and recommended J2SE options

994791 - SPNego Wizard

Regards,

AZLY