Re: Help with simple SSO authentication
Hello Matt, I've recently been working on this myself. There are a couple things to look at, one being what is provided by BMC in KA286851 https://kb.bmc.com/infocenter/index?page=contentid=KA286851is incomplete. There is no interceptor, unless it's in the uncompiled C code somewhere. I don't have access to a compiler. I had to download WAFFLE http://waffle.codeplex.com/and implement it. Also, ensure that your link isn't directly to the login.jsp. Yeah, I know that's the, does it have gas in it, question. HTH, Brian Gillock On Fri, May 10, 2013 at 10:22 AM, Matthew Perrault matthew.perra...@genmills.com wrote: ** All, Environment: Windows Server 2008 R2 IIS 7 Mid-tier/ARS: 7.6.04 2 Mid-TieràLoad BalanceràARS Servers. ** ** I’m trying to get our SSO authentication setup. The goal is to allow end users to hit the web site and have it automatically log them in (no log in prompt). We have the LDAP connection to AD working correctly, and we were trying to set this up without that Atrium SSO authenticator. Primarily because what I read says that keeps the password in it’s own file and still forces a person to login (was my understanding correct?).** ** I’ve read through the documentation and searched the web, and I’ve been able to find some things but nothing that has worked yet. I’ve got the Mid-tier all working ** ** I tired taking our SSOAuthenticator.jar and sso.properties file from 7.1 and moving it forward. But when I implement it on the Mid-Tier, it still prompts for login. I think I have the server side setup correctly: Authentication-Chaining-Mode: 4 Crossref-Blank-Password: T External-Authentication-RPC-Socket: 390695 AREA-Hub-Plugin: D:\Apps\BMC Software\ARSystem\areasso.dll AREA-Hub-Plugin: D:\Apps\BMC Software\ARSystem\arealdap\arealdap.dll ** ** Any thoughts/Help would be greatly appreciated, as I am fairly novice with this SSO setup stuff. ** ** Thanks, Matt P. ** ** ** ** _ARSlist: Where the Answers Are and have been for 20 years_ -- Brian Gillock Principal Consultant, BGBS, Inc brian.gill...@pbs-consulting.com ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Where the Answers Are, and have been for 20 years
Re: Help with simple SSO authentication
Thanks for the help Brian, But I got most of it figured out, I just walked through the code line by line (extracted the .java file in the SSOAuthenticarot.jar file) And found that I had not set up the environment variable that points to the areasso.config file correctly. I had set it up as a User environment variable instead of as a System environment variable. Once I corrected that the old 7.1 SSO stuff started to work fine. Now I just need to get it to pass through the Load Balancer and it will be done. Thanks for the help though Matt P. From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Brian Gillock Sent: Thursday, May 30, 2013 7:53 AM To: arslist@ARSLIST.ORG Subject: Re: Help with simple SSO authentication ** Hello Matt, I've recently been working on this myself. There are a couple things to look at, one being what is provided by BMC in KA286851 https://kb.bmc.com/infocenter/index?page=contentid=KA286851 is incomplete. There is no interceptor, unless it's in the uncompiled C code somewhere. I don't have access to a compiler. I had to download WAFFLE http://waffle.codeplex.com/ and implement it. Also, ensure that your link isn't directly to the login.jsp. Yeah, I know that's the, does it have gas in it, question. HTH, Brian Gillock On Fri, May 10, 2013 at 10:22 AM, Matthew Perrault matthew.perra...@genmills.commailto:matthew.perra...@genmills.com wrote: ** All, Environment: Windows Server 2008 R2 IIS 7 Mid-tier/ARS: 7.6.04 2 Mid-Tier--Load Balancer--ARS Servers. I'm trying to get our SSO authentication setup. The goal is to allow end users to hit the web site and have it automatically log them in (no log in prompt). We have the LDAP connection to AD working correctly, and we were trying to set this up without that Atrium SSO authenticator. Primarily because what I read says that keeps the password in it's own file and still forces a person to login (was my understanding correct?). I've read through the documentation and searched the web, and I've been able to find some things but nothing that has worked yet. I've got the Mid-tier all working I tired taking our SSOAuthenticator.jar and sso.properties file from 7.1 and moving it forward. But when I implement it on the Mid-Tier, it still prompts for login. I think I have the server side setup correctly: Authentication-Chaining-Mode: 4 Crossref-Blank-Password: T External-Authentication-RPC-Socket: 390695 AREA-Hub-Plugin: D:\Apps\BMC Software\ARSystem\areasso.dll AREA-Hub-Plugin: D:\Apps\BMC Software\ARSystem\arealdap\arealdap.dll Any thoughts/Help would be greatly appreciated, as I am fairly novice with this SSO setup stuff. Thanks, Matt P. _ARSlist: Where the Answers Are and have been for 20 years_ -- Brian Gillock Principal Consultant, BGBS, Inc brian.gill...@pbs-consulting.commailto:brian.gill...@pbs-consulting.com _ARSlist: Where the Answers Are and have been for 20 years_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Where the Answers Are, and have been for 20 years
Help with simple SSO authentication
All, Environment: Windows Server 2008 R2 IIS 7 Mid-tier/ARS: 7.6.04 2 Mid-Tier--Load Balancer--ARS Servers. I'm trying to get our SSO authentication setup. The goal is to allow end users to hit the web site and have it automatically log them in (no log in prompt). We have the LDAP connection to AD working correctly, and we were trying to set this up without that Atrium SSO authenticator. Primarily because what I read says that keeps the password in it's own file and still forces a person to login (was my understanding correct?). I've read through the documentation and searched the web, and I've been able to find some things but nothing that has worked yet. I've got the Mid-tier all working I tired taking our SSOAuthenticator.jar and sso.properties file from 7.1 and moving it forward. But when I implement it on the Mid-Tier, it still prompts for login. I think I have the server side setup correctly: Authentication-Chaining-Mode: 4 Crossref-Blank-Password: T External-Authentication-RPC-Socket: 390695 AREA-Hub-Plugin: D:\Apps\BMC Software\ARSystem\areasso.dll AREA-Hub-Plugin: D:\Apps\BMC Software\ARSystem\arealdap\arealdap.dll Any thoughts/Help would be greatly appreciated, as I am fairly novice with this SSO setup stuff. Thanks, Matt P. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org Where the Answers Are, and have been for 20 years
