BOE XI 3.1 using IIS

We are building a new BOE XI 3.1 using IIS as the web server, windows AD authentication and Kerberos for SSO.  At this point we have run into two issues: 
1. we can't configure Windows AD authentication for the CMC login.  We would also like to use SSO, but at this point would be happy getting WIndows AD working. 
2.  SSO does not work for the desktop tools like Universe builder or designer.  Windows AD is working but would like to get SSO working as well.
Please let us know if you have been able to configure either of the above in the environment that I describe.
Best Regards,
Kevin Geiger

I don't think any type of SSO will work with the CMC cept maybe siteminder in XI 3.1. AD will work but you will have to configure java AD due to the CMC not running on .net.
Now our Admin guide specifically states that using java kerberos and .net kerberos is not supported on the same server (not that it won't work). It just states that. So there are no docs that show how to set these both up at the same time.
So the doc in the previous post should help with the .net part. Where are you running the CMC? WACS? or tomcat?
Regards,
Tim

Similar Messages

  • Unable to login into BIP using IIS/Oc4j

    Hi ,
    we have configured SSO in OBIEE using IIS. and to configure oracle proxy for OC4J followed the steps at below url.
    http://gerardnico.com/wiki/dat/obiee/iis
    But getting the error when trying to browse the ulr
    http://localhost/xmlpserver/login.jsp
    Error: Internet Explorer cannot display the webpage
    any suggestion pls

    When I try:
    http://localhost:9704/xmlpserver/
    it direct me to BIP login page
    http://localhost
    Under Construction
    The site you are trying to view does not currently have a default page. It may be in the process of being upgraded and configured.
    Please try this site again later. If you still experience the problem, try contacting the Web site administrator.
    If you are the Web site administrator and feel you have received this message in error, please see "Enabling and Disabling Dynamic Content" in IIS Help.
    To access IIS Help
    Click Start, and then click Run.
    In the Open text box, type inetmgr. IIS Manager appears.
    From the Help menu, click Help Topics.
    Click Internet Information Services.
    http://localhost:9704
    It direct me to welcome page for OC4J
    any help please..
    when I try
    http://localhost/xmlpserver/login.jsp
    get the error please find the log:-
    12/06/12 13:36:22: [op_uri_map.c (129)]: Into op_uri_map_t::uri_map_alloc
    12/06/12 13:36:22: [op_uri_map.c (163)]: Into op_uri_map_t::uri_map_open
    12/06/12 13:36:22: [op_worker_list.c (37)]: op_worker_list_init: propfile=c:\proxy\proxy.conf p=0x010D4A60 l=0x010D24C0
    12/06/12 13:36:22: [op_worker_list.c (45)]: op_worker_list_init: numservers=1
    12/06/12 13:36:22: [op_worker_list.c (57)]: op_worker_list_init: inside loop, serverlist[0]=ias1
    12/06/12 13:36:22: [op_worker_list.c (73)]: op_worker_list_init: hostname=hrlvmdv1281.emea.hays.loc
    12/06/12 13:36:22: [op_worker_list.c (82)]: op_worker_list_init: port=9704
    12/06/12 13:36:22: [op_worker_list.c (160)]: op_worker_list_init: tablesize=3
    12/06/12 13:36:22: [op_worker_list.c (169)]: op_worker_list_init: lookuptable[0]=/xmlpserver/*, servlist[0]=ias1
    12/06/12 13:36:22: [op_worker_list.c (169)]: op_worker_list_init: lookuptable[1]=/xmlpserver oproxy.ias1.urlrule=/bioffice/*, servlist[0]=ias1
    12/06/12 13:36:22: [op_worker_list.c (169)]: op_worker_list_init: lookuptable[2]=/bioffice, servlist[0]=ias1
    12/06/12 13:36:22: [op_uri_map.c (193)]: op_uri_map_t::uri_map_open, rule map size is 3
    12/06/12 13:36:22: [op_uri_map.c (266)]: Into op_uri_map_t::uri_map_open, match rule /xmlpserver/=hrlvmdv1281.emea.hays.loc was added
    12/06/12 13:36:22: [op_uri_map.c (266)]: Into op_uri_map_t::uri_map_open, match rule /xmlpserver oproxy.ias1.urlrule=/bioffice/=hrlvmdv1281.emea.hays.loc was added
    12/06/12 13:36:22: [op_uri_map.c (301)]: Into op_uri_map_t::uri_map_open, exact rule /bioffice=hrlvmdv1281.emea.hays.loc was added
    12/06/12 13:36:22: [op_uri_map.c (313)]: Into op_uri_map_t::uri_map_open, there are 3 rules
    12/06/12 13:36:22: [op_uri_map.c (340)]: op_uri_map_t::uri_map_open, done
    12/06/12 13:36:22: [op_isapi_plugin.c (765)]: initialize_extension, success!
    12/06/12 13:36:22: [op_isapi_plugin.c (459)]: Start of HttpFilterProc
    12/06/12 13:36:22: [op_uri_map.c (363)]: Into op_uri_map_t::map_uri_to_host
    12/06/12 13:36:22: [op_uri_map.c (443)]: op_uri_map_t::map_uri_to_host, done without a match
    12/06/12 13:36:22: [op_isapi_plugin.c (553)]: HttpFilterProc [] is not a proxy url
    12/06/12 13:36:22: [op_isapi_plugin.c (459)]: Start of HttpFilterProc
    12/06/12 13:36:22: [op_uri_map.c (363)]: Into op_uri_map_t::map_uri_to_host
    12/06/12 13:36:22: [op_uri_map.c (443)]: op_uri_map_t::map_uri_to_host, done without a match
    12/06/12 13:36:22: [op_isapi_plugin.c (553)]: HttpFilterProc [] is not a proxy url
    12/06/12 13:36:22: [op_isapi_plugin.c (566)]: HttpFilterProc ==> SF_NOTIFY_LOG phase
    12/06/12 13:36:22: [op_isapi_plugin.c (566)]: HttpFilterProc ==> SF_NOTIFY_LOG phase
    12/06/12 13:36:23: [op_isapi_plugin.c (459)]: Start of HttpFilterProc
    12/06/12 13:36:23: [op_uri_map.c (363)]: Into op_uri_map_t::map_uri_to_host
    12/06/12 13:36:23: [op_uri_map.c (443)]: op_uri_map_t::map_uri_to_host, done without a match
    12/06/12 13:36:23: [op_isapi_plugin.c (553)]: HttpFilterProc [pagerror.gif] is not a proxy url
    12/06/12 13:36:23: [op_isapi_plugin.c (459)]: Start of HttpFilterProc
    12/06/12 13:36:23: [op_uri_map.c (363)]: Into op_uri_map_t::map_uri_to_host
    12/06/12 13:36:23: [op_uri_map.c (443)]: op_uri_map_t::map_uri_to_host, done without a match
    12/06/12 13:36:23: [op_isapi_plugin.c (553)]: HttpFilterProc [pagerror.gif] is not a proxy url
    12/06/12 13:36:23: [op_isapi_plugin.c (566)]: HttpFilterProc ==> SF_NOTIFY_LOG phase
    12/06/12 13:36:23: [op_isapi_plugin.c (566)]: HttpFilterProc ==> SF_NOTIFY_LOG phase

  • Configuring Windows XP to use IIS w/ Kerberos

    I need to build a Windows XP SSO solution using IIS 5.1 with Integrated Windows Authentication using Kerberos protocol. IIS will then pass the request over to another application which will need to use a Kerberos JAAS module to authenticate the respective users to the application.
    Does anyone have any instructions or tips on accomplishing these set of tasks? I have very limited experience with Kerberos. Any help would be much appreciated.
    Note: I've gotten this to work using NTLM, so I would like to know the level of difficulty in making the switch over to Kerberos.
    Thanks a lot in advance!
    Message was edited by:
    YvesG

    Because in SAP Help on topics <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/44/0ebf6c9b2b0d1ae10000000a114a6b/content.htm">Single Sign-On with Microsoft Kerberos SSP</a> and
    <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/44/0ebf6c9b2b0d1ae10000000a114a6b/content.htm">Configuring the Application Server</a>, tell to copyt the gsskrb5.dll file(see SAP Note 595341), to the following directory on the central instance: Drive:\%windir%\system32.
    This text let me think that central instance is installed on a Windows Server, but on SAP Help docs I didn't found the specific information that the central instance must be installed on a Windows Server.

  • How do I set up and use IIS 7.5 in Windows 7

    I just bought a new machine and installed Windows 7 RC Ultimate and CS4 on it.
    I set up IIS (or at least I think I did) and Inetpub now shows in the directory listing, so it should be there.
    Only problem is that I cannot save any files to any site in the Inetpub directory even when logged in as administrator.
    I have to manage lots of web sites that use asp, and so need to have the Inetpub facility.
    Setting up IIS in Windows 7 is poorly documented, and seems quite complex.
    The instructions on Microsoft's technet site for accessing IIS do not work, and so I am at a loss.
    Am I to assume that the normal Dreamweaver method of storing files in inetpub/wwwroot/sitefolder is no longer valid?
    Whether or not, can anyone tell me how to set up a site in windows 7 that will run an asp site using IIS?

    http://forums.iis.net/t/1147354.aspx has the answer to providing acess to folders that are not usually accesible in Windows 7.
    Run the following command from an elevated command prompt (right click the "command prompt" icon and select "Run as Administrator").
    icacls %systemdrive%\inetpub /grant  %userdomain%\%username%:(OI)(CI)(F) /grant %userdomain%\%username%:F
    This command will add full access for your user account to the INETPUB directory.
    Now the Administrator privileges which you don't have don't matter anymore because your account and not Administrators grant you access.
    How obscure can you get?
    I assume that changing the folder name from inetpub to whatever other folder you need to access will have the same effect.
    All I have to sort out now is how to get the F12 key on my wireless keyboard to run a file when pressed in Dreamweaver - but that is another problem.

  • Help with using IIS as webserver

    I have two DNS that maps to two application on the same instance of weblogic.
    I have to use IIS as my webserver, and so I have two IIS apps that maps by path. In one of the iisproxy.ini file - WlForwardPath = / and in the other WlForwardPath = /app2
    My context-root for both applications in the application.xml file is / and /app2 respectively.
    However my first DNS works fine - http://app1.company.com, but the second DNS does not work if i type http://app2.company.com. If I type http://app2.company.com/app2 then it works fine. Is there some way that I can implicitly make http://app2.company.com point to http://app2.company.com/app2 ? Any help greatly appreciated.

    bgeorge,
    I haven't used the IIS Plugin, but in the Apache plugin, I think that there's a "PathPrepend" parameter for the plugin that I think might do what you want, i.e., you'd do a "PathPrepend=/app2".
    See:
    http://e-docs.bea.com/wls/docs81/plugins/plugin_params.html#1143055
    Hope that this helps.
    Jim

  • How to Open MPP programmatically without using IIS Express in WCF Application

    Hi all,
    i have been succeeded to open Microsoft Project Profession file programmatically for Project that is created in project server
    please refer this
    link.
    but now we have to do this task in WCF Application then if we enable "Use IIS Express" option then this code is working fine.
    but if we uncheck or remove "use IIS express" option then it is not working, what would be the possible reason for this?
    and just wondering if we deploy this WCF service on some X server, does this code will be helpfull??
    Basically we are looking for the exact functionality what "Open with Project" button do in project server. (please refer below image)
    Regards, Kartik Ghodasara Associative Software engineer, Synoverge Tech Pvt. Ltd. Ahmedabad Please vote or mark as answer if it helps...

    the code's not formatted so I'm not going to try to read it,
    and there's too many ?? to remove before it will compile,
    so, you say it works with the mouse - how, clicking a button?
    if so, search for the keyBindings tutorial where you can set up
    an action for (e.g.) F2 to do button.doClick()

  • How to use repository in boe xi r2 to use common formula's & commands

    How can the repository in boe xi r2 be used to store common formula's and commands (i.e. sql - 'add command') so that multiple developers can insert the formula's into new reports to ensure consistency in data selection etc...

    Hi,
    i guess you are talking here about Crystal Reports. In CR it is possible to store functions and formulas into the repository to re- use these in different Reports.
    In WebI you cant. In WebI you could create Objects in the Universe to re- use them in different Reports.
    Hope this clarifies a bit more.
    Regards
    -Seb.

  • Use IIS 7 (Microsoft) with Adobe Media Server Extended 5.0

    I install Adobe Media Server Extended 5.0 and Flash Media Live Encoder 3.2. Good running. But I want use IIS 7 (Microsoft) replace Apache 2.2. Help me config to run
    <moved by mod from downloading,installing,setting up - kglad>

    Tried in Google : .swf to .flv, .swf to ..f4v convertors
    I convert the LMS Content Output formats .swf files to .flv files using SWF to FLV Convertor and upload
    on the Flash Media Server 3.5 using
    Moyea SWF4Tube Converter (SWF to FLV Converter)
    Web URL : http://www.swfkits.com/swf-to-flv-converter/
    In this way can i then use the Adobe Flash Media Server 3.5 for Viewing LMS Content in
    as a Streaming Video on my IE 6.0/7.0 Browser with Flash Player 10 installed ?
    Thanks & Regards,
    Prashant S Akerkar

  • Need help on struts configuration with ColdFusion 10 using IIS

    We need help on struts configuration with ColdFusion 10 using IIS.
    Earlier we were using ColdFusion 8 with IIS 6 for one of our application.  This application internally calls struts. After upgrading to ColdFusion 10 struts calls are not loading. We get 404 error.
    In ColdFusion 8 struts were configured using  actions extension .do in IIS from this file-
    C:\ColdFusion8\runtime\lib\wsconfig\jrun_iis6.dll.
    But in ColdFusion 10 this file is not present as ColdFusion 10 uses Tomcat in place of Jrun.
    Also there is no information in ColdFusion log file.

    Duane wrote:
    doctormirabilis, Welcome to the discussion area!
    1) how can i configure the time capsule in order to operate as a remote base station synchronizing with the relay using the ethernet port?
    Configure the Time Capsule to act as a bridge (not distributing IP addresses). Also configure the Time Capsule to create an 802.11n wireless network with a unique network name (SSID). That's it.
    2) how can i avoid that my powerbook while accessing my wireless network does connect through the relay station instead of using the time capsule?
    Configure the Time Capsule to use a different network name than the WDS link between the 2 AirPort Express (AX). Configure the PowerBook to use the Time Capsule network.
    There are 2 pieces of information that you should be aware of...
    (1) None of the PowerBooks are capable of 802.11n.
    (2) The WDS link cuts your available bandwidth in half. So the wireless link to your neighbor's has a maximum potential of 27 Mbps.
    Let's for a minute assume that you have a Mac compatible with 802.11n. In your configuration the time you could take advantage of the 802.11n speed is when the Mac is sending/recieving data directly from/to the Time Capsule.
    There would be NO speed increase in Internet access. The speed of Internet access is going to be controlled by the slowest link in the path to the Internet. That is probably the connection to the ISP. The next slowest path is the WDS link to your neighbor's.
    Duane,
    I am in a similar situation, sharing internet with my neighbor. Do you think it would be plausible to hook up a vonage phone adapter to time capsule's ethernet port if time capsule is bridging from my neighbor's router in the configuration you have described? A check of my upload speed shows 1.67Mbps (powerbookG4 w/ airport extreme). Vonage reccommends 90kbps minimum upload speed. Am I going to lose some speed putting the Vonag adapter behind time capsule?
    Thank you

  • Issues using IIS 8.5 with ARR 3.0 as Reverse Proxy for Lync 2013

    Dear reader, after searching for a day without finding a solution to my problem I end up here ;-)
    Working Lync 2013 environment (gradually adding functionality) consisting of 2 FE servers, Persistent Chat Server, Web Apps server, Edge Server, Reverse Proxy Server (IIS 8.5/ARR 3.0), SQL Server.
    Set up a fresh Windows 2012 R2 with IIS 8.5, installed ARR 3.0 and followed along this
    TechNet article.
    So far so good, external clients (incl. mobile phone apps) can all connect.
    Now trying to add Web Apps to the reverse proxy, which is slightly different from the others by not forwarding 80/8080 and 443/4443, but just 80 and 443 to internal Web Apps server.
    After creating the server farm/URL rewrite, browsing to the webapps.FQDN/hosting/discovery ends up with a 404 error (instead of XML, which is shown when try from the LAN).
    After moving this rewrite rule to the top, it started working, but now my lyncdiscover.FQDN stops working.
    Ofcourse moving the webapps rule down restores the lyncdiscover.
    Any ideas? (everything setup as described in above mentioned TechNet article, so using wildcards. Tried fiddling around with webext.* and lyncdiscover.* and so, but no luck. (I'm completely new to ARR)
    Thanks,
    Barry

    Can you confirm that for each URL Rewrite Rule, you have an {http_host} record that matches something like webext.* as you referenced above and as seen in step 15 here:
    http://blogs.technet.com/b/nexthop/archive/2013/02/19/using-iis-arr-as-a-reverse-proxy-for-lync-server-2013.aspx
    It might help if you posted a screenshot of your URL rewrite rules.
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
    SWC Unified Communications

  • Migration on windows server 2003 to 2012 r2 by using IIS 6.0 what are parameters are changed means supported and non suported parameters and configurations?

    In my project am going to migrate windows server 2003 to 2012 r2 by using IIS 6.0? what are the parameters are changed and what are the parameters are not supported and what are the modules need to change?
    Please give the related answer as soon as posssibule. that is more help for me?
    Thanks,
    vamsikrishna.

    1. This seems to be incomplete description.
    2. You can enable legacy technologies while installing roles and features.
    3. For application pool(s) you should consult respective developer/vendor team(s) for help.
    Regards
    Milos

  • Client Certs for just one directory using IIS

    I am using JRun 4 and IIS 5 on one site and IIS 6 on another, and am using SSL and requiring client certificates. I have all that working through IIS's site properties but my issue is that I only want to accept client certificates on one directory, in fact I only want the request for the client cert to pop up on that one directory. By setting the JRun.dll to the proper security settings to accept client certificates in IIS, any jsp file will prompt for the cert.
    Do I not want to want to use IIS to set up my SSL and client cert request as opposed to doing it in the web.xml? All my research pointed me to do this through IIS. Using IIS, do I need to use another ISAPI Jrun connector? How do I do that?
    Can someone tell me a way to get this working for a client cert prompt only for the one directory either though IIS or application security?
    Thanks for any input you can provide.

    Hello Bill,
    I am sorry but I do not have an answer to your issue. It just
    happend that I am trying to set up SSL connection between JRUN 4
    and IIS 5 using JRUN ISAPI connector. Unfortunately every time I
    try to run the "*.jsp" test page I am getting "fetchprops" error
    message on JRUN ISAPI connector. Would you be able to give me some
    hints as to what could cause this issue. By the way, I am testing
    it only with trial version of SSL certificate on IIS.
    Thank you

  • Can I use IIS for flex portal development?

    I want to use IIS for flex portal development. As we can user
    jboss portal server to deploy flex portlets.
    Is it possible ?
    Thanks

    Hello,
    pulling 10-25 million rowsYou will never want to show that many records on a page or html based report, the page weight would be absolutely huge along with your network load (this would be the case in any web enviroment), even google which I will have to assume has many more records than you do only shows 10 records returned at a time.
    Results 1 - 10 of about 3,510,000,000 for htmlApplication Express can handle sql queries against that data, the question you really should be researching is what it takes to create queries that perform well against such a dataset
    http://forums.oracle.com/forums/search.jspa?threadID=&q=query+large+datasets&objID=c18
    Carl

  • Lync Mobile unable to sign in using IIS ARR

    We have a deployment which currently has no issues using an Apache reverse proxy running on Ubuntu. I am working on switching over to a supported reverse proxy, so IIS ARR is the obvious choice. I have configured IIS ARR by following the steps at:
    http://uclobby.com/2013/08/02/configuring-arr-for-lync-server/
    http://blogs.technet.com/b/nexthop/archive/2013/02/19/using-iis-arr-as-a-reverse-proxy-for-lync-server-2013.aspx
    When I try to sign on externally using Lync 2013 Mobile, I get a message saying "An unknown error occured". The Lync Mobile logs show the following error:
    Caused by: java.net.ConnectException: failed to connect to /xxx.xxx.xxx.xxx (port 443) after 60000ms: isConnected failed: ECONNREFUSED (Connection refused)
    I have even gone as far as opening all the ports to the IIS ARR server on the firewall and disabling Windows firewall on everything.

    To fix issue "502 - Web server received an invalid response while acting as a gateway or proxy server.", you can refer below link
    http://support.microsoft.com/kb/2455129/en-us
    it's assume reverse proxy configuration issue, please check the following things:
    Please make sure your internal web service url and external web service url are not pointed to the same FQDN.
    Verify you have update the public certifcates including lyncautodiscover URL in the SAN entries for your reverse proxy server
    Check the authenticated delegation is set to "No delegation, but clients may authenticate directly"
    Please try to enable internal access and see if it works
    If still no luck,please enable Lync server logging tool and reproduce the issues,then use snooper to analyze the log for more specific information
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
    Mai Ali | My blog: Technical

  • Using IIS AAR as a reverse proxy for Exchange 2010 & Lync 2013

    hi
    i am planning to use IIS AAR as reverse proxy solution for both Exchange 2010 & Lync 2013 . need clarifications on the below.
    Is it production ready proof solution of using IIS AAR as a reverse proxy solution , if yes what is the sizing considerations for the same.
    Can we have exchange reverse proxy and lync reverse proxy on the same IIS ARR server.
    Is there any special consideration(license/certificates/cal licenses) needs to be taken care while using this solution
      4.  Deployment Guide available?

    hi steve.. thanks for reply..
    1 have gone through that.. however having both exchange & lync reverse proxy on single server is unanswered and the reason for having this in exchange forum is to have consideration from exchange prospective as well ... 
    I am also wondering this.  Can both exist on the same set of proxy servers?  I also plan to have a load balanced solution.  Has anyone had any luck with doing that?

Maybe you are looking for