BO 3.1 SP3 Tomcat SSO

[Former Member]

Hi,

Were having a strange problem with AD sso to Tomcat for one remote site (manual AD login works). They always get the same error internet explorer cannot display this webpage. This is in Internet explorer as well as in Firefox so not browser related. Other users in other sites have no problems. So it´s probably to do with their network or domain controller but I have no idea what it could be.

Setspn -L shows us the correct values.

It worked fine last week but since 3 days we have these problems.

On the BO server no changes were done and we only have on site with this problem and they all use the same BO server.

Any idea what could be wrong ?

Thank you for any help or tips.

Gunther.

[julian_jimenez]

Hi Gunther,

Without detailed error message, I can only guess the reason:

1. Maximum header in Tomcat. You can increase the value.

2. You can enable debug in Tomcat to see more information in stdout.log.

3. You can capture network in the clients with problems to see if they can't resolve the SPN for the Tomcat server or can't obtain a Kerberos ticket.

Regards,
Julian