LDAP integration to the portal

[Former Member]

Hi,

We have implemented NW2004s compoenets EP,BI(ABAP+JAVA),ECC6.0 . We wanted to implement LDAP integration with portal , so that user can login with OS credentials

I have configured LDAP server details in portal system , system admin>system config>UME config-->LDAP server

Test connection is sucess

Aslo SAP system test connection is success. Then restarted the server .

But when i lgoin to the http://bneportal.kpml.com:50100/irj system is still asking the user id & password.

Afetr configured LDAP it should not ask ID and password .

Is there any additional settings i need to do in visual admin?

Thanks,

Kristene

[Former Member]

Hi ,

We have opened OSS message as suggested by SAP , SPNego is nolonger available to support in NW2004s stack.For that SAP suggested to follow note 994791.

Also how Windows active directory users will authenticated to Portal system. Client have approx 1500 users in Active directory , should all these users will need any additional privilages in active directory.Like file read and write and LDAP administrative privilages ,special groups at windows domain controller and etc..

Our Network security team suggested us to provide user privilages in LDAP/KDC server .How the users will authenticated to Portal system.Since we are using NW2004s ABAP system as datasource not sure how these users authentication.

We request you to help us to give more details for user authetications.

Thanks,

Kristene

[Former Member]

Sid ,

I have seen the blogs but iam not clear. I just need information

what are the settings can be done at Windows domain controller and settings at Enterprise portal.

- Kristene

[Former Member]

Kristene, please see this SDN Wiki. I'm pretty sure it'll be helpful:

<a href="https://www.sdn.sap.com/irj/sdn/wiki?path=/display/ep/settingUpanLDAPforthePortal&">Setting Up an LDAP for the Portal</a>

[Former Member]

Hi Sid ,

I did not get exact steps. Can you please give all the steps to implement.

- Kristene

[sid_sunny]

Hi Kristene,

Refer to this thread /thread/203898 [original link is broken] . The same problem is discussed there also and the problem has been solved using these two blogs only. Just have a look and if still have problems then you can contact that person probably who solved this problem using these blogs. As I myself has never tried implementing the Blogs.

<b>Do reward points.</b>

Regards

Sid

[sid_sunny]

Hi Kristene,

I myself have never implemented it as such but I found these two blogs can help you in achieving what you are trying.

<a href="/people/gregor.wolf3/blog/2004/10/09/integrated-windows-authentication-with-sap-ep-60-sp-3-and-higher-part-2-of-2 1</a>

<a href="/people/vaibhav.dua2/blog/2006/04/24/kerberos-implementation-with-ads-made-easy 2</a>

Refer to this first <a href="http://help.sap.com/saphelp_nw04/helpdata/en/99/ca7af0793cc24c889b082b7230daaa/frameset.htm">Link</a>

<b>Do reward points if it helps.</b>

Regards

Sid

[Former Member]

Siddharth, one of the blog links you have given refers to a deprecated method involving the IisProxy ISAPI module which is no longer supported. The correct Blog links should be:

<a href="/people/vaibhav.dua2/blog/2006/04/24/kerberos-implementation-with-ads-made-easy Implementation with ADS Made Easy</a>

<a href="/people/wai-hon.lam/blog/2006/04/20/windows-integrated-authentication-via-kerberos-on-an-ldap-data-source Integrated Authentication via Kerberos on an LDAP data source</a>

Kristene, best of luck.

[Former Member]

Hello Sid,

We are looking SPnego authentications. User should login throgh windows authentications automatically.

When ever user login from OS then goto the link , it should not ask login credential.

- kristene

[sid_sunny]

Hi Kristene,

Is your problem solved.

Regards

Sid

[Former Member]

Hi,

Yes, we dont want login credential.User should login automatically with out credientials.

Is there additional settings to do?

- Kristene

[sid_sunny]

Hi Kristene,

Yes, you have to implement SSO. For the settings read this document.

<b>Do reward points if it helps</b>

<a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e676ec90-0201-0010-cfa3-90b7c1291903">Configure SSO for a complex system</a>

Regards

Sid

[sid_sunny]

Hi Kristene,

I am not sure but what you have done will only help you login through the OS credentials on to the portal, I guess you must be able to login to portal through your OS credentials but to automatically login to Portal you need SSO (single sign on) implemented between the two systems.

Regards

Sid