Enterprise XI 3.1 trusted authentication problems

[first_last]

I followed the instructions to enable trusted authentication (XI 3.1 admin guide, page 561+):

• created shared secret value in CMC ('my_secret'); checked 'trusted authentication is enabled; set secret validity period to 1; left tmeout at 0

• created the TrustedPrinicpal.conf file in C:\Program Files\Business Objects\BusinessObjects Enterprise 12.0\win32_x86

• added line to file that reads SharedSecret=my_secret; saved file

• edited InfoView's web.xml file located at C:\Program Files\Business Objects\BusinessObjects Enterprise 12.0\warfiles\WebApps\InfoViewApp\WEB-INF

• made the following changes:

<context-param>

<param-name>siteminder.enabled</param-name>

<!-- <param-value>true</param-value> -->

<param-value>false</param-value>

</context-param>

<context-param>

<param-name>sso.enabled</param-name>

<!-- <param-value>false</param-value> -->

<param-value>true</param-value>

</context-param>

<context-param>

<param-name>trusted.auth.user.retrieval</param-name>

<param-value>QUERY_STRING</param-value>

</context-param>

<context-param>

<param-name>trusted.auth.user.param</param-name>

<param-value>user_name</param-value>

</context-param>

• restarted tomcat and server intelligence agent (probably not necessary, but did it just for good measure)

• attempted to logon to InfoView: http://localhost:8080/InfoViewApp/logon/start.do?user_name=foobar

didn't get an error message, but it didn't get past the logon page.

What did I miss?

[Former Member · Accepted solution]

Hi,

It looks like all the configuration has been done correctly, But request you to Please check the web.xml again for the below changes

<context-param>

<param-name>vintela.enabled</param-name>

<param-value>false</param-value>

Also use the below url and test the issue again

http://servername:port/InfoViewApp/logon/logon.do?user=Administrator

Also we have very good kb article on the complete configuration.Please refer the below article for further details.

1422248 - Setting up Trusted Authentication in XI 3.x for Infoview and Opendocument using QUERY_STRING

Regards,

Raja

[first_last · Accepted solution]

the vintela.enabled parameter was set to false:

<context-param>

<param-name>vintela.enabled</param-name>

<param-value>false</param-value>

</context-param>

Seeing as how the parameter name is 'user_name', shouldn't the URL be:

http://localhost:8080/InfoViewApp/logon/logon.do?user_name=Administrator

This doesn't work either.

[Former Member · Accepted solution]

Hi,

Also could you please recheck the name of the TrustedPrincipal.conf file . Its case sensitive.

Regards

Raja

[first_last · Accepted solution]

checked: TrustedPrincipal.conf

other ideas?

where do i locate that KB article?

[Former Member · Accepted solution]

Hi,

I just noted that the path of web.xml file which have modified seems to be incorrect, if your using tomcat you need to modify web.xml in the below directory.

C:\Program files\Business Objects\tomcat55\webapps\InfoViewApp\WEB-INF

Also, you can go to the service market place and click and help&support and type the article number to view the sap article

Regards,

Raja

Regards,

Raja

[first_last · Accepted solution]

That worked. http://localhost:8080/InfoViewApp/logon/logon.do?user_name=[user name here]

http://localhost:8080/InfoViewApp/logon.jsp?user_name=[user name here] did NOT work. It gives an error message about the account being disabled (which it is not).

Looks like the administrator's guide needs a SERIOUS revision. While you (SAP) are at it, include the proper URL that will 'see' the querystring parameter.

Thanks for your help.