topic Re: Kerberos SSO w/ 4.0.d in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/kerberos-sso-w-4-0-d/m-p/263230#M216360 <HTML><HEAD></HEAD><BODY><SPAN>Apologies for the double post, but I had a minor breakthrough.</SPAN><BR /><BR /><SPAN>In java.login.config I changed the principal from the SPN to the service account name, when I did this SSO for /alfresco worked as expected, however with /share I get a credential popup that rejects my credentials, when I cancel it I get the Alfresco login landing page where I'm able to login.</SPAN><BR /><BR /><SPAN>In the logs I see this when I try to login through the popup:</SPAN><BR /><BR /><BLOCKQUOTE class="jive-quote">2012-02-14 10:49:03,459&nbsp; WARN&nbsp; [site.servlet.KerberosSessionSetupPrivilegedAction] [http-8080-22] credentials can not be delegated!<BR /> 2012-02-14 10:49:24,916&nbsp; WARN&nbsp; [site.servlet.KerberosSessionSetupPrivilegedAction] [http-8080-22] credentials can not be delegated!</BLOCKQUOTE><BR /><BR /><SPAN>I have verified that the service accounts are enabled for delegation. </SPAN><BR /><BR /><SPAN>Another thing is that while this works in Chrome/Firefox, IE doesn't; It simply displays the message "IE canont display the web page" as though the site does not exist.</SPAN></BODY></HTML> Tue, 14 Feb 2012 19:04:22 GMT ashex 2012-02-14T19:04:22Z Kerberos SSO w/ 4.0.d https://connect.hyland.com/t5/alfresco-archive/kerberos-sso-w-4-0-d/m-p/263229#M216359 Hello Everyone,I've been working at this for a few days but haven't made much progress, I'm trying to get Kerberos SSO with Share working and am not having any success. I followed this guide on the wiki and have verified that everything is set correctly, however when I start tomcat and access http:/ Mon, 13 Feb 2012 23:51:05 GMT https://connect.hyland.com/t5/alfresco-archive/kerberos-sso-w-4-0-d/m-p/263229#M216359 ashex 2012-02-13T23:51:05Z Re: Kerberos SSO w/ 4.0.d https://connect.hyland.com/t5/alfresco-archive/kerberos-sso-w-4-0-d/m-p/263230#M216360 <HTML><HEAD></HEAD><BODY><SPAN>Apologies for the double post, but I had a minor breakthrough.</SPAN><BR /><BR /><SPAN>In java.login.config I changed the principal from the SPN to the service account name, when I did this SSO for /alfresco worked as expected, however with /share I get a credential popup that rejects my credentials, when I cancel it I get the Alfresco login landing page where I'm able to login.</SPAN><BR /><BR /><SPAN>In the logs I see this when I try to login through the popup:</SPAN><BR /><BR /><BLOCKQUOTE class="jive-quote">2012-02-14 10:49:03,459&nbsp; WARN&nbsp; [site.servlet.KerberosSessionSetupPrivilegedAction] [http-8080-22] credentials can not be delegated!<BR /> 2012-02-14 10:49:24,916&nbsp; WARN&nbsp; [site.servlet.KerberosSessionSetupPrivilegedAction] [http-8080-22] credentials can not be delegated!</BLOCKQUOTE><BR /><BR /><SPAN>I have verified that the service accounts are enabled for delegation. </SPAN><BR /><BR /><SPAN>Another thing is that while this works in Chrome/Firefox, IE doesn't; It simply displays the message "IE canont display the web page" as though the site does not exist.</SPAN></BODY></HTML> Tue, 14 Feb 2012 19:04:22 GMT https://connect.hyland.com/t5/alfresco-archive/kerberos-sso-w-4-0-d/m-p/263230#M216360 ashex 2012-02-14T19:04:22Z Re: Kerberos SSO w/ 4.0.d https://connect.hyland.com/t5/alfresco-archive/kerberos-sso-w-4-0-d/m-p/263231#M216361 <HTML><HEAD></HEAD><BODY><SPAN>See </SPAN><A href="https://forums.alfresco.com/en/viewtopic.php?f=9&amp;t=27445" rel="nofollow noopener noreferrer">https://forums.alfresco.com/en/viewtopic.php?f=9&amp;t=27445</A></BODY></HTML> Sun, 10 Jun 2012 13:52:06 GMT https://connect.hyland.com/t5/alfresco-archive/kerberos-sso-w-4-0-d/m-p/263231#M216361 dward 2012-06-10T13:52:06Z