SSO using Kerberos windows authentication in Pega 7.1.9 using SPNEGO
Hi All,
We have already done the configuration changes at Tomcat server like krb5, jass.conf and spnego-r7.jar files in 7.1.9. But we are not receiving the credentials in request header. Every time we are getting login page. Below steps we followed for SSO setup.
Please let me know if any one is done similar configurations or any different approach for SSO using kerberos
STEPS TO CONFIGURE/IMPLEMENT KERBEROS IN ERIMATCH APPLICATION
Creation of SPN’s
Domain Controller
Tomcat instance
Spnego Related Changes
Pega Side Code changes
Also we have seen recently in Nov 2016 post, saying that kerberos feature is given directly in Auth service in 7.2.2 as per below article. Please let us know any similar article in 7.1.9.
Thanks,
Arjun
***Updated by moderator: Lochan to add Categories; remove personal information***
Pegasystems
IN
UserPrincipal was added to the pxRequestor page for access by REST connectors or fetching LDAP credentials in 7.2.2.
Sample PRCustom scheme was provided for use by customers in 7.2.2.
in 7.1.9 , you can use kerberos credentials for login to PRPC but cannot cascade them for downstream services.
TCS
IN
Hi All,
As per the pega 7.1.9 installation guide, while installing we need to enable kerberos at database side. But we didnt enable this as it is a optional. Can we now enable this Kerberos after installation of pega.
Please find the attached relavant screen shots.
Thanks,
Arjun.
Pegasystems
IN
If you setup your datasource(PegaRULES jndi) to use kerberos principal and configure it in prconfig, it should work since jdbc will take care of the connection.
J P Morgan
IN
"But we are not receiving the credentials in request header" - This apparently means that kerberos token is not coming to tomcat server itself.
You need to look at your kerberos configuration and troubleshoot accordingly.
I have configured Kerberos with WLS and I assume there won't be a lot of difference with Tomcat configuration.
I have listed the ways to troubleshoot kerberos issues on my website
You need to enable kerberos debug on tomcat and look at the logs. You can paste/upload your logs here if you want me to check.
Regards,
Faisal