Skip to Content
0
Feb 27, 2019 at 01:58 PM

SPNEGO - NTLM token received in authorization header

706 Views Last edit Feb 27, 2019 at 02:00 PM 2 rev

Hi,

I am trying to authenticate to SAP Netweaver Portal 75 with Active Directory user. It works if I use these entries:

http://host1:50500/irj/portal

http://host1.domain.es:50500/irj/portal

http://host1.subdomain.domain.es:50500/irj/portal

http://servername:50500/irj/portal

http://servername.domain.es:50500/irj/portal

http://servername.subdomain.domain.es:50500/irj/portal

But they also have configured in F5 rules a new address:

http://host2.domain.es

They want to access the Portal with that URL without port (obviuosly it is 80).

When I access to the firsts 6 entries it works and login is done with Windows user. When I access to this last URL it returns an error and prompts login page witohout login to de SAP Portal. The error is:

NTLM token received in authorization header

I have also made some nslookup queries:

1.- The first 6 entries return servername.domain.es

2.- The last entry returns host2.domain.es

One last thing, the Realm is configured:

- Principal only. Logon ID.

- HTTP/servername.domain.es@REALM

What could I do? Do I have to config 2 different setspn for both servername.domain.es and host2.domain.es?

Thanks.