Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

SPNEGO entegration - Authorized Error on SEC_form test

Former Member
0 Kudos

Hi,

We want to implement SPNEGO on AIX , NW 2004s.

But Sec_form test get an error , NOT AUTHORIZED.

Portal user's path is < OU=****,DC=*****,DC=*****,DC=com >

group path is < OU=****,DC=*****,DC=*****,DC=com >

Entegration user (j2ee-SID) organization unit is < CN=J2EE-<SID>,OU=Special Users,OU=****,DC=*****,DC=*****,DC=com >

Portal user path and entegration user pats is different, Because we don't want affected J2EE-SID by the portal user policies.

- J2ee-SID user settings is OK

- In Visual Admin settings finished succesfuly , when I tested connection, authentication, everthing is OK.

- SPNego Wizard (http(s)://<host>:<port>/spnego ) settings is OK, Our kerberos principle name J2EE**@**.com is resolved

- Portal server date,time is same the AD server system date, time

- Browser settings is OK

What can I do, Thanks in your advace.

2 REPLIES 2

Former Member
0 Kudos

Fethi,

When using JDK you have to do some different configurations on the J2EE engine. Check SPNego installation guide at help.sap.com for more information.

Also see sap note 953660 for howto use the SPNego test application to check J2EE configurations.

Regards,

Said

hemanth2
Product and Topic Expert
Product and Topic Expert
0 Kudos

Dear Fethi ,


Hope you are doing good.

First of all please can you configure SPNEGO again. Kindly run the wizard as outlined in the below notes depending on your version:


SAP Note 994791: spnego wizard.
SAP Note 1488409- New SPNego Implementation

For more help, please see the videos in the note. In many cases we have seen that this configuration is incomplete and re-running normally solves the issue.
Useful blogs:

http://wiki.sdn.sap.com/wiki/display/Security/Single+Sign-on+with+SPNego+%28NWAS+Java%29

https://www.sdn.sap.com/irj/scn/weblogs?blog=/pub/wlg/8795


If the issue perists,kindly run the web diag tool specially developed for kerberos issues  as outlined in
# 958107 - Using Diagtool for Troubleshooting Kerberos with "Security" -> "All"  and reproduce the issue. This should help in getting the error.

Thank you and have a nice day :).

_____________
Kind Regards,
Hemanth
SAP AGS