Windows authentication with Kerberos

[Former Member]

Hi All,

We have configured Kerberos for Windows Authentication for EP 7.0.

The authentication works fine when we use the server name alone, but it fails when we use the FQDN.

Any clues would be really helpful.

Regards,

Noufal

[Former Member · Accepted solution]

Hi Noufal,

When you register the Service Principal Name on the LDAP, Please make sure that you register it with your FQDN.

Please refer the Excellent Blog series by Holger Sir here..

http://www.sdn.sap.com/irj/scn/weblogs?blog=/pub/wlg/8235. [original link is broken]

These blog series cover almost all the errors caused during SPNEGO configuration.

Regards

Hussain.

[Former Member · Accepted solution]

Thank you for the link .

When I added the server name with the full domain in the security zone of the local intranet in the client browser it worked fine.

Do we have an option to solve this from the server side itself.

I guess it would not be feasible to make the change in all the client systems.

Regards,

Noufal

[hofmann · Accepted solution]

Hi,

this is a client / browser configuration. To make this on all clients in the company, use the AD GP to set this property. Talk with your MS Active Directory team so they can add the FQDN to the IE security site.

br,

Tobias

[Former Member · Accepted solution]

Thank you