SSO with Kerberos on a Unix Central instance and Linux application servers

[Former Member]

Dear specialists ...

I'm setting up a SSO configuration using Kerberos.

My system is ECC6 with the central instance configured on a HP-UNIX and the application servers configured on Linux systems.

My questions are:

- Do I have to enable SNC on both the central instance and the application servers (meaning that I have to put the SNC parameters in the profiles of the central instance and the application servers)?

- Do I have to generate logon tickets on both the central instance and the application servers ?

Since I do not have much experience with this Kerberos I probably did not provide all the details possible, so please do not hesitate to ask me more ....

kind regards

Davy

[markus_doehr2 · Accepted solution]

Do you want to authenticate against Active Directory or against a separate Kerberos server?

Markus

[Former Member · Accepted solution]

Dear Markus,

there is a KDC installed on the domain controller.

kind regards

Davy

[markus_doehr2 · Accepted solution]

You can use the blog

to configure that. However, it needs to be done on all systems that want to do the authentication, not only on one.

Markus

[Former Member · Accepted solution]

Hi Markus,

thanks for the info.

If I use a logon group, will the authentication then happen only on the Central instance?

kind regards

Davy

[markus_doehr2 · Accepted solution]

No.

A logon group just distributes the logons across different application servers, the authentication itself is done on the server where the user is distributed to, not on the CI.

Markus

[Former Member · Accepted solution]

Hi Markus,

thanks a lot for the info.

do you know if there is any official documentation covering this topic ?

kind regards

Davy

[markus_doehr2 · Accepted solution]

Documentation for what? Authentication?

Markus

[Former Member · Accepted solution]

Never mind Markus, I have all I need.

thanks for the effort

regards

Davy