Anonymous_User Absent Member.
Absent Member.
150 views

Configure UA with SSO - Provider 2008r2


Hi,

Has anyone tried setting SSO for UA up in an Windows 2008r2
environment?
Forest and Domain Level are both 2008r2.
IDM 401 Adv. Edt. on SLES11sp1-64 bit.

Previous I have had it working with both 2003 and 2008.

Also, if anyone could tell me the best way to debug/track kerberos
communication between (Win7-wkstn) - (2008r2-DC) - (SLES11sp1-IDV) -
(SLES11sp1-UA) I would be very grateful.

Thank you in advance

- martin


--
moldin
------------------------------------------------------------------------
moldin's Profile: https://forums.netiq.com/member.php?userid=118
View this thread: https://forums.netiq.com/showthread.php?t=46615

Labels (1)
0 Likes
4 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Configure UA with SSO - Provider 2008r2


I would like to know that aswell, since I'm not able to get it to work
propperly.

Jacob.


--
jacmarpet
------------------------------------------------------------------------
jacmarpet's Profile: https://forums.netiq.com/member.php?userid=415
View this thread: https://forums.netiq.com/showthread.php?t=46615

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Configure UA with SSO - Provider 2008r2

On 01/25/2013 07:54 AM, jacmarpet wrote:
>
> I would like to know that aswell, since I'm not able to get it to work
> propperly.
>
> Jacob.
>
>

Greetings,
The Enterprise SSO works correctly when AD is 2008. If you are
having issues, then I would suggest opening a Service Request

--

Sincerely,
Steven Williams
Lead Software Engineer
NetIQ
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Configure UA with SSO - Provider 2008r2


Steven Williams;224569 Wrote:
> On 01/25/2013 07:54 AM, jacmarpet wrote:
> >
> > I would like to know that aswell, since I'm not able to get it to

> work
> > propperly.
> >
> > Jacob.
> >
> >

> Greetings,
> The Enterprise SSO works correctly when AD is 2008. If you are
> having issues, then I would suggest opening a Service Request
>
> --
>
> Sincerely,
> Steven Williams
> Lead Software Engineer
> NetIQ


Hi Steven

Thank you for your answer.
I have had it working just fine on 2008 but this is 2008r2 and it seems
there has been made some changes to the kerberos configuration.

I will, as you suggest, open a SR.

- martin


--
moldin
------------------------------------------------------------------------
moldin's Profile: https://forums.netiq.com/member.php?userid=118
View this thread: https://forums.netiq.com/showthread.php?t=46615

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Configure UA with SSO - Provider 2008r2


My issue was TIME.
The Windows workstation (and the DC) had lost 9 minutes compared to the
UA (and eDir).

Setting the clock on the Windows computers fixed the problem.

Default Kerberos max time gap allowed on Windows is 5 minutes.

- martin


--
moldin
------------------------------------------------------------------------
moldin's Profile: https://forums.netiq.com/member.php?userid=118
View this thread: https://forums.netiq.com/showthread.php?t=46615

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.