Hi All,
I've configured SSO for HANA DB but is stuck while configuring BOE Single Sign On. I have created the needed files (krb5.ini and bscLogin.conf) and both are in C:/Windows. I can also login using Manage Servers but when using AD login for both CMC and BI Launchpad, I get this error:
"Account information not recognized: Active Directory Authentication failed to log you on. Please contact your system administrator to make sure you are a member of a valid mapped group and try again. If you are not a member of the default domain, enter your user name as UserName@DNS_DomainName, and then try again. (FWM 00006)"
I've verified that the user I'm using is showing in "Users and Groups" in CMC. Checking on the Webapp_BIlaunchpad trace file, I see this error message:
"Cannot create LoginContext. Unable to locate a login configuration "
Here are the contents of my krb5 and bscLogin files:
krb5
[libdefaults]
default_realm = XXX.XXX
default_keytab_name = FILE:c:\Windows\BOEDEV.keytab
dns_lookup_kdc = true
dns_lookup_realm = true
default_tgs_enctypes = rc4-hmac
default_tkt_enctypes = rc4-hmac
udp_preference_limit = 1
[realms]
XXX.XXX = {
kdc = MSC01DC.xxx.xxx
default_domain = xxx.xxx
}
[domain_realm]
xxx.xxx = XXX.XXX
.xxx.xxx = XXX.XXX
bscLogin
com.businessobjects.security.jgss.initiate {
com.sun.security.auth.module.Krb5LoginModule required debug=true;
};
I've also added the following on the 'catalina.bat' file:
setlocal
set JAVA_OPTS=%JAVA_OPTS% -Xmx1024m -XX:MaxPermSize=256m -Dfile.encoding=UTF8
-Djava.security.auth.login.config=C:\Windows\bscLogin.conf
-Djava.security.krb5.conf=C:\Windows\krb5.ini
This is the part where I have second thoughts since I'm not sure if I put the correct line in the correct file. Can you please let me know where I can change the JVM Options for Tomcat 7? I followed the steps from "Configuring AD Manual Authentication and SSO for BI4.pdf" but is stuck on this part related to JVM Options and trying to login to BI Launchpad and CMC using AD.
Thanks for the help in advance.
Regards,
Robert
