Kerberos with SSL

[Former Member]

Hello All,

I need to implement Kerberos on a Portal with is SSL enabled.

Portal is integrated with LDAP as well.

I do understand that we need to create a servicePrincipleName.

In all the blog Ive read on Kerberos/SPNego, they all mention the value as HTTP/Abs.company.com xyzj2ee

In our case, should it still be HTTP/Abs.company.com xyzj2ee or HTTPS/Abs.company.com xyzj2ee?

Please help me clear my doubt here....

Thanks,

Ritu

[daniel_rothmund · Accepted solution]

Hello ,

we have SPENGO with HTTPS active. The SPN HTTP/xxy.com is right !

Best regards

Daniel

[Former Member · Accepted solution]

Thanks a lot Daniel.

[Former Member · Accepted solution]

Hi Ritu,

We have SPNego setup as well and our SETSPN starts with HTTP/servername...

Side Note:

J2EE Engine configured with SSL (HTTPS)

Although the J2EE Engine is accessed with HTTP the setting for the ServicePrincipalname still has to be HTTP/servername (and not HTTPS/servername). If not HTTP/servername is used, then no Kerberos Ticket will be created an for the user.

https://www.sdn.sap.com/irj/sdn/wiki?path=/display/ep/troubleshooting

Hope that helps and award points for helpful suggestions.

Ray

Edited by: Raymond HENG on Sep 22, 2008 9:18 AM