A93 Legasuite 6 Kerberos Setup

jon bunting

Member
Hi,

My name is Jon Bunting. I'm working for a company
that is in the early stages of upgrading our existing World 7.39 to A931.

We have performed an upgrade on our test box.

Is anyone using Kerberos Single Sign-on with Legasuite 6?

I have updated the registry on my Windows XP machine.
I have updated the HTML and I have updated the legasuite.ini file on the IFS.

Kerberos is still prompting for a password.
We currently use Kerberos in Jwalk version 4, so I know the underlying set-up is OK.

Does anyone have any suggestions as to what I may have missed?

Thanks
Jon
 

Attachments

  • 185083-kerb.jpg
    185083-kerb.jpg
    7.6 KB · Views: 117
I should add we installed Legasuite V6 via A93WEB downloaded from the Oracle web site.

Thanks
Jon
 
Solved! :)

There are error(s) in the current legasrv.chm help file.

It currently reads:

Windows Vista (windows 7)
HKEY_LOCAL_MACHINE\System \Current\CurrentControlSet\Control\Lsa\Kerberos
Value name: allowtgtsessionkey
Value type: REG_DWORD
Value: 0x01

Windows XP
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters
Value name: AlloTGTSessionKey
Value type: REG_DWORD
Value:1

This should read:

Windows Vista (windows 7)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters
Value name: allowtgtsessionkey
Value type: REG_DWORD
Value: 0x01

Windows XP
HKEY_LOCAL_MACHINE\System \Current\CurrentControlSet\Control\Lsa\Kerberos
Value name: AllowTGTSessionKey
Value type: REG_DWORD
Value:1


For info we have the leagasuite ini as follows:
[A93APP]
EmulatorSystem=ISERIESNAME.COMPANY-NAME.COM
AutomaticSignOn=0

The legasuite.html

theApplet.addParameter('Server', 'iseriesname.company-name.com');
theApplet.addParameter('Port', '1289');


theApplet.addParameter('KerberosHost', 'iseriesname.company-name.com');
theApplet.addParameter('KerberosKdc', 'dc01.iseriesname-company.com');
theApplet.addParameter('KerberosRealm', 'COMPANY-NAME.COM');
theApplet.addParameter('KerberosUseCache', 1); //Controls whether user credentials are taken from cache

Regards
Jon
 
Back
Top