How to setup a KDC for Kerberos Authentication

Hi,
I am new to Kerberos. I am trying to execute the sample codes on Sun site but i am not understanding how to setup a KDC.
Please help me.
Regards.

Hi Alexander,
create the proxyauth.txt file in the roor directory of you MI Client installation and add the following paramters to the text file:
MobileEngine.Sync.Proxyuser= Username for Proxyserver
MobileEngine.Sync.Proxypw=Password for Proxyserver
Regards
Tahran

Similar Messages

Setting realm and kdc for kerberos authentication

Hi there,
I was wondering if it's possible to set the default realm and kdc from within the code or do they have to be specified when starting the program? I know that they can be specified in a configuration file, but then the config file must be specified every time the program is run. If I can't set the realm and kdc, can I at least set the config file in my code?
Thanks in advance

For example, to start up my code that uses JAAS to authenticate against kerberos, I have to type:
java -Djava.security.auth.login.config=sampleConfig.conf MyClass
I need to have a servlet do the authentication, so how can I tell my servlet to use the specified configuration file, since it won't be launched from the command line.

Can i use a different ADS server as KDC for Kerberos authentication ?

Hi all:
For some security concerns, I cannot use my central ADS as KDC and run ktpss, setspn in central ADS.
Can I use another ADS server as KDC server and run ktpass, setspn to configure the Kerberos ?

My portal UME is configured to central ADS as Database+LDAP
I donot want to make the central ADS as KDC server running. I just want to make another ADS server as KDC server, is it possible ?

SAP IDM 7.2: How to setup SSO functionality for WebUI of CRM and GRC?

Hello IDM-experts,
where can my customer find information about
SAP IDM 7.2: How to setup SSO functionality for WebUI of CRM and GRC?
Customer situation description:
The situation is that we are using SAP IDM 7.2. We are using a functionality to allow our users to access a webpage from where they can gain
SSO access to the Abap systems via the SAPGui. See screenshot as an example.
Now what we want is to access the CRM and GRC WebUI also with the same SSO possibility. We cannot find any guide/best practice on how to do
this or if it is possible via SAP IDM 7.2.
You can see a weblink in the first screenshot but it does not work. It will ask you for a username and password, see second screenshot.
Kind regards,
Daniela

Do you know how the SAP GUI SSO is setup ? Is it using SNC/Kerberos ?
If it is (I suspect it is), then you will need to use similar method of authentication for the ICF Services. These cannot use SNC since they are accessed via browser, but what you want is possible.
Thanks
Tim

How to setup the RV120W for quickvpn

Hello,
The PPTP client from Windows 7 is not working with this router; therefore I would like to try the quickvpn.
Is there any paper from Cisco explaining how to setup the RV120W for quickvpn ?
Thanks for any help

User Guides for thee rv120W are here:
http://www.cisco.com/en/US/docs/routers/csbr/rv220w/quick_start/guide/rv220w_qsg.pdf
http://www.cisco.com/en/US/docs/routers/csbr/rv120w/administration/guide/rv120w_admin.pdf
and theres some more stuff over on my site:
http://www.linksysinfo.org/index.php?forums/cisco-small-business-routers-and-vpn-solutions.49/

How to setup IPV6 boundary for SCCM 2012 R2 Primary Site?

How to setup IPV6 boundary for SCCM 2012 R2 Primary Site?
I have Direct Access implemented in my environment. I have Windows 8.1 machine connecting through direct access.
I want to manage the windows 8.1 through SCCM. How do I setup IPV6 boundary. Can someone guide me through?
Below are the Windows 8.1 client IP Configuration
C:\Windows\system32>ipconfig
Windows IP Configuration
Wireless LAN adapter Local Area Connection* 3:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
Wireless LAN adapter Wi-Fi:
   Connection-specific DNS Suffix . : home
   Link-local IPv6 Address . . . . . : fe80::7466:11a5:39ed:ffb0%4
   IPv4 Address. . . . . . . . . . . : 192.168.1.5
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.1
Tunnel adapter isatap.home:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . : home
Tunnel adapter Teredo Tunneling Pseudo-Interface:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:1494:1339:93d6:439c
   Link-local IPv6 Address . . . . . : fe80::1494:1339:93d6:439c%9
   Default Gateway . . . . . . . . . :
Tunnel adapter iphttpsinterface:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000:e1a7:9cc8:c3c7:d819
   Temporary IPv6 Address. . . . . . : fd64:fc00:d17b:1000:206c:f857:ddbe:2f2b
   Link-local IPv6 Address . . . . . : fe80::e1a7:9cc8:c3c7:d819%10
   Default Gateway . . . . . . . . . :
Below are the IPConfiguration details for Direct Access server
C:\Windows\system32>PsExec.exe \\MURA01 ipconfig
PsExec v1.98 - Execute processes remotely
Copyright (C) 2001-2010 Mark Russinovich
Sysinternals - www.sysinternals.com
Windows IP Configuration
Ethernet adapter Ethernet:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:3333::1
   Link-local IPv6 Address . . . . . : fe80::b1ad:1c29:b4a:9125%15
   IPv4 Address. . . . . . . . . . . : 10.192.1.25
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.192.1.1
Tunnel adapter Teredo Tunneling Pseudo-Interface:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
Tunnel adapter isatap.{3D6A5E86-D85A-46C8-B69B-FFCF6D5D849C}:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1:0:5efe:10.192.1.25
   Link-local IPv6 Address . . . . . : fe80::5efe:10.192.1.25%18
   Default Gateway . . . . . . . . . :
Tunnel adapter 6TO4 Adapter:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
Tunnel adapter IPHTTPSInterface:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000::1
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000::2
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000:2552:e9f8:87d3:ed8e
   Link-local IPv6 Address . . . . . : fe80::2552:e9f8:87d3:ed8e%20
   Default Gateway . . . . . . . . . :
ipconfig exited on MURA01 with error code 0.
Below are the IPCONFIG Details for SCCM Server:
C:\Windows\system32>PsExec.exe \\sccm01 ipconfig
PsExec v1.98 - Execute processes remotely
Copyright (C) 2001-2010 Mark Russinovich
Sysinternals - www.sysinternals.com
Windows IP Configuration
Ethernet adapter Ethernet:
   Connection-specific DNS Suffix . :
   Link-local IPv6 Address . . . . . : fe80::9f0:86f9:441d:bc07%12
   IPv4 Address. . . . . . . . . . . : 10.192.1.30
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.192.1.1
Tunnel adapter isatap.{0749E47D-AE0A-4D47-9D37-BDDC848E56F6}:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
ipconfig exited on sccm01 with error code 0.
What will be the IPV6 values to configure boundary?

Depending on how the clients connect use the IPv6 prefix of their 6to4, Teredo, and/ or IP-HTTPS tunnel. Just keep in mind that it could become a long list...
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

How to setup SSL cert for SharePoint apps in a three tier farm with nlb

I am having trouble understanding how to setup the SSL certificate on SharePoint apps or in general its configuration

Please check the below thread..
https://social.technet.microsoft.com/Forums/sharepoint/en-US/53465d30-10b2-48c9-9541-5ade738156b4/how-to-setup-ssl-cert-for-apps
Don't forget to mark it as an Answer if it resolves your issue and Vote Me as helpful if it useful.
Mahesh

How to setup Data guard for SAP database?

Can someone please tell me how to setup data guard for SAP databases?
Thanks,
Abhi

Hi Abhi,
have a look at OSS 105047 - Support for Oracle functions in the SAP environment you find this under
14
Oracle Data Guard
You can use "Physical Standby".
You cannot use "Logical Standby".
You are allowed to use Fast Start Failover (FSFO) but SAP Support is not provided.
You can use Data Guard Broker.
You can use Maximum Performance Mode, Maximum Availability Mode and Maximum Protection Mode.
In the case of Maximum Availability and Maximum Protection, you must pay particular attention to a fast network connection in order to avoid performance problems.
Maximum Protection causes the primary database to terminate if problems occur in the standby database.
And here you find on Oracle white paper from 2010 http://www.oracle.com/us/solutions/sap/wp-ora4sap-dataguard11g-303811.pdf
Perhaps some SAP user have answers for you http://scn.sap.com/community/oracle/content?query=guard
regards
Kay

How to setup my airport for music streaming

Hi all
I would like to use my iPhone and or iPad to stream music from Pandora and Spotify to my 5.1 (Wired) Speakers.
This question is similiar to this thread https://discussions.apple.com/thread/4153687 however i wanted some clarity and thought best to start a new discussion before pulling my hair out doing this the wrong way.
I have an unused Airport Express basestation (A1408) My current home setup is as follows:
Modem Router: (Netgear DGND3700) N600 Wireless ADSL2+ Dual band Gigabit
Home Theatre Computer: Windows 7 (Cat6 LAN Ethernet connection) NO LAN port
AV Reciever: (Onkyo TX-SR309)
5.1 Speakers: Wired connection to AV Receiver (NOT Airplay capable)
Laptop: Windows 7 (Cat6 LAN Ethernet connection)
My question is how to setup the airport, i understand it can be used to enable airplay streaming of music over the existing WiFi network, as these music streaming apps download and play music concurrently i would not want to have to switch between to two seperate WiFi networks. Should i plug the airport into the HTPC? I would need to purchase a LAN Splitter as the only LAN socket is already taken up with my cat6 connection. OR would i plug it directly into the modem/router? This second option is prefereable.
I have attached an image of my setup below. Any advice would be great, Regards Steve
[URL=http://s1293.photobucket.com/user/steve7677/media/homesetup_zps63eaf61c.jpg.html][IMG]http://i1293.photobucket.com/albums/b599/steve7677/homesetup_zps63eaf61c.jpg[/IMG][/URL]

Still slightly confused, with the link you provided i chose scenario 2. All the other secanrios instructed i connect the airport express to my home stereo or powered speakers. As i dont have an aiport express only an airport extreme there is no audio jack and cannot connect it to the stereo/speakers.
option 2: Connecting to an existing Wi-Fi network as part of a roaming network
Ensure that the AirPort base station Ethernet cables are connected as above
I have done this and conected it via ethernet cat6 to the modem/router
Launch AirPort Utility 6.1. The Assistant will automatically configure the Roaming network
Im using windows 7 and cannot find this version of aiport utility, only 5.6.1 - The message comes up: Aiport utility was unable to find any airport wireless device. I am running this utility on my win7 HTPC (which is connected to my modem/router via cat6 LAN) The airport light is blinkng amber.
would you reccommend a hard reset of the airport? or can you provide a link for AirPort Utility 6.1.?
Regards

Any document explaining Risks involved in assigning "Delegation Permission" to a computer for Kerberos Authentication

Need SSO on CRM 2013. As per documents assigning Delegation Permission in Kerberos Authentication is mandatory to achieve SSO in CRM 2013.
Before doing that need to evaluate risks in doing so. Any help or document for the same is helpful.
Devesh

Hi Devesh,
“The idea of delegation in Kerberos is that if a user makes a request to a final resource, and some
intermediary accounts must process the request, then those intermediary accounts can be trusted to delegate on the user’s behalf. You can configure an account for delegation by using Active Directory Users and Computers as a domain administrator.
Select Trust this user/computer for delegation to any service (Kerberos) under the Delegation tab of the user or computer account.”
Quoted from this article below:
Using Kerberos for SharePoint Authentication
http://technet.microsoft.com/en-us/magazine/ee914605.aspx
From my point of view, as long as the intermediary account can be trusted, then it is safe.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Detect if database is enabled for Kerberos authentication

In our test and development environment, some of our databases are set up with authentication using Kerberos, while others are not.
We have a script that traverses all our databases, collecting different kind of information (db size, db version, etc.) which we present on an internal web page.
Is there a way to query the database itself if it is enabled for Kerberos or not? Is there a internal v$ or DBA-view that shows this information?
We are on Oracle 11.2.0.3:
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
PL/SQL Release 11.2.0.3.0 - Production
CORE 11.2.0.3.0 Production
TNS for Linux: Version 11.2.0.3.0 - Production
NLSRTL Version 11.2.0.3.0 - Production
Thanks in advance for your help.

Hi,
you need to develop logic around these below statements:
From SQL you need to check:
select STATUS from V$INSTANCE;
FOR DOS:
tnsping $ORACLE_SID
From Unix :
ps -ef|grep pmon

How to setup Anonymous TP for Immediate ACK for HL7

All,
Can someone give me steps to setup Anonymous TP for Immediate ACK for HL7?
Dipal

Ramesh,
I follow the concept, I am not quite sure about the steps. I am outlining the steps as per my understanding correct me If i am wrong.
- update existing TP "A" for ex to remove business action for ack.
- update exiting TP "A" for ex to disable FA
- Create Anonymous TP with business action Generic Ack and validation off.
- Set oracle.tip.adapter.b2b.defaultTP = Anonymous in tip.properties
oracle.tip.adapter.b2b.hl7.singleDC=true
oracle.tip.adapter.b2b.hl7.genericMessageType=ACK
oracle.tip.adapter.b2b.hl7.immediateAck=default
Would this be it? or am I missing any steps?
I am still not quite sure how would b2b know to respond to incoming message from TP "A" and send the MSH.10 value in ACK and datetime format we need.
Please let me know.
Dipal

How to setup separate rington for each contacts?

Will someone point me to a tutorial or show me how to setup separate ring-tone for each contacts?

http://support.apple.com/kb/HT1413
Assign a ringtone to a contact
From Phone, tap Contacts and choose a contact. Tap Ringtone and choose a ringtone. When that person calls, you hear that ringtone.

Windowns dll file for Kerberos Authentication

Hi,
I am implementing Kerberos Authentication with Windows x64. The SAP Post installation guide metions that gx64krb5.dll file needs to copied under <Drive>:\%windir%\system32. It also metions that the file need to be downloaded from SAP Note 352295,.But "An SAP note with the number requested could not be found". Any other place from where I can download the file.
Regards
Deb

Okay, I found my PDF copy of [Note 352295|https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=352295], and it contains the links to download the files from sapnet for both 64 and 32 bit.
Here is the link for the 64 bit:
https://service.sap.com/~sapidb/012003146900000310652008E/win64sso.zip
And just in case anyone reading this thread needs to get to the 32 bit:
https://service.sap.com/~sapidb/012003146900000310642008E/win32sso.zip

Can anyone tell how to setup audit trials for opm

HI,
how to setup audit trials function available in sys admin for OPM modules.
can any one provide steps to hav audit trials.

Does the jaxp direcory have a jaxp.jar?
Add jaxp.jar to Classpath.

How to setup a KDC for Kerberos Authentication

Similar Messages

Maybe you are looking for