Windows Driver SSO Settings
book
Article ID: KB0088708
calendar_today
Updated On:
TIBCO DataSynapse GridServer
|
-
|
Not Applicable
|
-
|
Description
Resolution:
1.Add the following into the web.xml file of your manager after the <filter> … </filter> tag set for manager SSO
<filter-mapping>
<filter-name>authFilter</filter-name>
<url-pattern>/director/PublicDriverChannel</url-pattern>
</filter-mapping>
2. Apply the following KB on the driver machine http://support.microsoft.com/kb/308339
3. Set the DSKerberosRealm and DSKerberosKDC in the driver.properties file or set them programmatically.
DSKerberosRealm = KERBEROS_REALM
DSKerberosKDC = ACTIVE_DIRECTORY_SERVER
e.g.
DSKerberosRealm=TESTAD.LOCAL DSKerberosKDC=dsldn-vm2k3AD-01.testad.local
4. For C++ and .Net drivers, you have to create a file called krb5.ini and put it in the c:windows directory of your driver machine.
Contents of krb5.ini
[libdefaults]
default_tgs_enctypes = AES256-CTS RC4-HMAC DES-CBC-MD5 DES-CBC-CRC
default_tkt_enctypes = AES256-CTS RC4-HMAC DES-CBC-MD5 DES-CBC-CRC
preferred_enctypes = AES256-CTS RC4-HMAC DES-CBC-MD5 DES-CBC-CRC
[domain_realm] .your.domain = YOUR.DOMAIN ActiveDirectoryMachineName = YOUR.DOMAIN ActiveDirectoryMachineName.your.domain = YOUR.DOMAIN
---------------------------------------------------------------------------
An example of krb5.ini
[libdefaults] default_tgs_enctypes = AES256-CTS RC4-HMAC DES-CBC-MD5 DES-CBC-CRC default_tkt_enctypes = AES256-CTS RC4-HMAC DES-CBC-MD5 DES-CBC-CRC preferred_enctypes = AES256-CTS RC4-HMAC DES-CBC-MD5 DES-CBC-CRC
[domain_realm] .testad.local = TESTAD.LOCAL dsldn-vm2k3AD-01 = TESTAD.LOCAL dsldn-vm2k3AD-01.testad.local = TESTAD.LOCAL
Issue/Introduction
Windows Driver SSO Settings
Feedback
thumb_up
Yes
thumb_down
No