Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

SPNego works for nwa but not for irj

Former Member

‎09-30-2009 6:17 PM

0 Kudos

Hello,

I am wondering if anyone has seen this before; We have set up SPNego authentication per the guides and notes. We can authenticate using Kerberos/SPNego for the /nwa (NetWeaver Administrator) URL but not for the /irj (portal). When we try the /nwa - everything works as expected, logged in and appropriate roles applied. When we try the /irj - we receive a blank (or blue rather) screen. A second ENTER on the URL bar brings us to the form-based login page.

In the security log we see "Access Denied. No authorization header received". The user (in the context of the error) is "Guest".

We do have the user defined in the ume.login.guest_user.uniqueids = Guest.

We do have the Guest user as a member of Guests.

Any help that can be offered is greatly appreciated.

Kind regards,

Judson

1 REPLY 1

Former Member

‎10-07-2009 12:42 PM

0 Kudos

Seems to be that the ume.login.context and .default were calling the "ticket" logon policy but was not using it. Maybe an SP0 glitch or our config - but changing those two values to directly use the spnego template works fine. SAP is checking... thanks anyway.

Judson