Java InfoView SSO

Dear Experts, the SSO for .NET works fine with my setup except that the if i try to login from a user workstation, it prompts me for username/password while i have already enables "Enable Integrated Windows Authentication" in IE Advanced tab. I'm currently installing BO XI 3.1.
I was not what else I could do to make it work.
Another problem is that I'm trying to setup Java InfoView SSO and I find that all documents wants me to use Vintella. While I remember I never used Vintella in BO XI R2.
please guide me from here.

Does that mean (what you' re saying) that without Vintella, the Kerberos SSO will not work with Java InfoView?
Exactly kerberos and vintela are the same thing in regards to java invoview they essentially allow java intoview to be set up the same way as IIS when doing integrated windows authentication.
If I do http://server.domain.com/InfoViewApp/logon.aspx, I get "Network Error (dns_unresolved_hostname). Your requested host "server.domain.com" could not be resolved by DNS.
This is your main problem both the hostname and FQDN URL's rely on the FQDN SPN (most of the time) You appear to have a DNS issue preventing that from being resolved. You can try adding the FQDN of the server to your local client host machine.
The IP will not work unless you have also added an IP SPN to the account (which is not done by default)
Working on the server indicates SSO is setup on IIS/web.xml/BO but Microsoft forces NTLM on the local machine so kerberos is not being tested in this case. You may need to open a case with the authentication team if unable to find the issue.
Regards,
Tim

Similar Messages

  • SharePoint 2007 + Java InfoView (Kerberos SSO v/ Vintela)

    At one point I was able to get the Document List web part working with SharePoint 2007 + Java InfoView, but now I'm back to getting the dreaded error:
    Unable to access the BusinessObjects Enterprise infrastructure at RP-BOEXI31 for user: . Contact your reporting administrator for assistance.
    Kerberos SSO w\ Vintela works flawlessly with InfoView on its own, but I can't seem to pinpoint why I'm having this issue.  I can get it to work with .NET InfoView (NTLM) without a problem.
    I enabled tracing, but where does this information go to?
    <!-- Displaying problem tracking messages in web part pages -->
        <add key="BusinessObjects Enterprise Trace Enabled" value="True" />
    So I've looked at various logs on the SharePoint server in these locations without any luck.  Does anyone know of any other logs I should be looking at when tracing is enabled?
    The Admin Guide states:
    Tracing provides you with stack trace information and web page configuration
    options that can help you to understand any issues in greater detail. For
    example, if you see an unexpected error message, and tracing is enabled,
    the tracing information is listed at the bottom of the same web page where
    the error occurred. Scroll down to see the tracing information provided by
    SharePoint for the web part.
    However, I havn't been able to decipher in that information anything that sticks out.
    Log Locations Reviewed Already:
    - C:\Program Files\Common Files\Microsoft Shared\web server extensions\12\LOGS
    - The various W3SVC* folders under C:\WINDOWS\system32\LogFiles\
    Also - I was able to get it to work temporarily when I enabled NTLM in the SharePoint Admin Console as I didn't see any reason to be running my SharePoint services using an SPN of any kind since it is on a seperate server than the BOE web tier and just passes the credentials to InfoView.
    Edited by: Jay Riddle on Apr 1, 2009 4:07 PM

    Somehow I don't think that is the issue because when I use the PIK in combination with .NET InfoView using NTLM SSO, the credentials pass fine and all the web parts work.  I've enabled prompting of authentication in the web.config and have tried the domain\user format as well as just the user format manually - but this doesn't work with Java InfoView using SSO regardless of the format the user credentials are entered in.  I'm continuing to test multiple different variables and may create a separate image with Java InfoView with a new SPN in order to ensure it isn't something with the BOE image.
    One odd thing is I had at least the Document List part working briefly when I changed the SharePoint Authentication zone to NTLM instead of Kerberos (which has IIS use NETWORK SERVICES run the services).  One day it just stopped working.

  • Unable to connect to CMC and Java Infoview

    Hi
    I am unable to connect to CMC and Java Infoview. When I am attempting to connect, then the following message is displayed.
    "Oops! Internet Explorer could not connect to <web server>:<port number>"
    Please give me some suggestions.
    Thanks!

    Hi Stratos
    I uninstalled the designer and repaired Crystal Reports Server. But it did not help.
    The CMS is running now. But I cannot find all the other services and I am getting the same error when I try to open CMC or InfoView.
    I found some of these errors in my system's event viewer:
    NT Service message: NT Service Initialization Problem.
    The root server reported an error Initialization Failure.
    The source for both these errors is BusinessObjects_CMS.
    Please suggest something
    Thanks

  • BOE Java Infoview error

    Hi,
    After installing BOE on Linux server from 10.0.1 media with "novell-zenworks-configure -c InstallBOE" we get the following error in ZCC:
    An error occurred while trying to launch the Business Objects Java Infoview"
    In zcc.log we get:
    Exception Info:
    07 Feb 2008 12:52:04 Class....... com.novell.zenworks.reports.exception.ReportExcept ion
    07 Feb 2008 12:52:04 Message..... com.crystaldecisions.sdk.exception.SDKException$OC AFramework: Server prbbrl1.domain.si not found or server may be down
    cause:com.crystaldecisions.enterprise.ocaframework .OCAFrameworkException$NotFoundInDirectory: Server prbbrl1.domain.si not found or server may be down
    cause:java.net.ConnectException: Connection refused
    detail:Server prbbrl1.domain.si not found or server may be down
    The exception originally thrown was java.net.ConnectException: Connection refused
    detail:Server prbbrl1.domain.si not found or server may be down
    The exception originally thrown was com.crystaldecisions.enterprise.ocaframework.OCAFr ameworkException$NotFoundInDirectory: Server prbbrl1.domain.si not found or server may be down
    cause:java.net.ConnectException: Connection refused
    detail:Server prbbrl1.domain.si not found or server may be down
    The exception originally thrown was java.net.ConnectException: Connection refused and had the following message: Server prbbrl1.domain.si not found or server may be down
    The exception originally thrown was java.net.ConnectException: Connection refused
    07 Feb 2008 12:52:04 Logged at... ReportRedirection...273
    07 Feb 2008 12:52:04 ============== Exception (end) =============================
    07 Feb 2008 12:52:04 MessageUtil..........78 :Error: An error occurred while trying to launch the Business Objects Java Infoview. For more details, see the ZCC log.
    What could be the problem?
    Thanks
    Mare

    Originally Posted by brestt
    Try deleting your "Super Administrator equivalent user" and recreate it.
    I'm using a "User Source" user and deleted it from the Administrators list, recreated it with Super Administrator equivalence. Also saw that there are some rights for Inventory Reporting and Asset Management Report Rights, so I granted Full Rights to all of those. Logged out/in but no reports. I get the following URL in the browser window before it auto-closes
    https://zs-erl-02.xxx.xx/businessobj...SessionEnd.jsp
    The zcc.log was the most recently changed log but only showed "ReportReidrect......88 :Forming the URL....."
    Kirk

  • Crystal Reports Server 2008 Infoview SSO

    I finally have Crystal Reports Server 2008 configured and working for AD authentication with kerberos. Users can now log into Infoview fine.  Now, I need to take the next step and advance the ball to get it working for SSO.  We had this working on our Crystal Reports Server XI environment, but it sure has changed for 2008.  Can anybody provide information and/or documentation on next steps to move from AD Authentication to AD SSO Authentication?  What are best practices? What is most efficient?
    Thanks,
    Jeff

    If you are configured for kerberos then you already have the CMS/SIA running under an AD service account correct?
    If so [this doc |https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/002b818d-3db2-2b10-9895-c7b5fd4cbc71]will get vintela SSO working.
    Regards,
    Tim

  • How to enable DHTML viewer in Java Infoview Portal

    Hi,
    I am using BOXi 3.1.  I have created a crystal report with cross tab, having the drilldown hyperlink enabled.  But when I export the report to Infoview I am not getting the drill down option.  When I searched the manual its mentioned that drill down will work only in DHTML viewer.  How to enable the same in Infoview to enable the drill down.
    Thanks and Regards,
    Subbu S

    Not sure if this is what you are after but all Crystal Report viewing options (Active X, HTML, Java) are set under preferences -> Crystal Reports in InfoView.

  • How many ports do I need to open for Java InfoView? - CR Server 2008 v1

    Hi,
    We are using Crystal Reports 2008 V1 (BuildVersion=12.1.0.114.CRS2008_V1). CMS runs on Oracle 10g. The product I need help for is InfoView.
    The report server is behind a firewall. I would like to know how many ports do I need to open and what they are so that I can access to InfoView (Java Version) from internet.
    The client's IT blocks all ports, except HTTP 80 and HTTPS 443. Is it possible to configure InfoView to run on port 443? Would one port be enough? Port 80 is being used by another application.
    I would appreciate any light to be shed on this issue.
    Thanks,
    Sinan

    InfoView will just need a single port. However CR Server 2008 has additional component who interact. I believe that CR Server 2008 doesn't allow a distributed installation so then the only port that should be opened on the firewall is to reach the web application and from the application server towards the database server hosting the CMS database.
    Hope this helps...
    Martijn van Foeken
    Focuzz BI Services
    http://www.focuzz.nl
    http://nl.linkedin.com/in/martijnvanfoeken
    http://twitter.com/mfoeken

  • B0XI3.1 Infoview SSO using WindowsNT Authentication

    We have recently set up 3.1 on a development server and are currently trying to configure NT authentication and SSO for Infoview. NT authentication appears to be working as when Infoview is launched the logon screen appears and allows you to enter you NT logon details. However my understanding is that if SSO is enabled correctly then the logon screen should be bypassed? I have followed all of the BO documentation and looked at various posts on this forum but still no success. Can anyone think of anything we may have missed?

    >
    Howard Burgess wrote:
    > We were able to implement WindowsNT SSO for infoview on IIS with the following steps:
    >
    > Prereq. Make sure WindowsNT Authentication is working properly. Then move to SSO.
    >
    > 1. Enable SSO in CMC under WindowsNT Authentication.
    > 2. In the IIS Console, check the properties for the businessobjects application. Under the Directory Security tab, edit the anonymouse access and authentication control. Uncheck the anonymous access and only have Integrated Windows Authentication checked. Check WebAdmin and InfoView apps under Enterprise115 to make sure they have the same settings.
    > 3. Modify WebAdmin's web.config.
    >        Add the following lines of code within the <system.web> element if not already there:
    >                    <identity impersonate="true" />      
    >         <authentication mode="Windows" />
    > 4. Modify InfoView's web.config
    >        Add/change the following lines of code within the <system.web> element if not already there:
    >                    <identity impersonate="true" />      
    >         <authentication mode="Windows" />
    >        Modify keys within <WebDesktopSettings> element:
    >                    <add key="authenticationDefault" value="secWindowsNT" />
    >                    <add key="authenticationVisible" value="false" />
    >                    <add key="ssoEnabled" value="true" />
    > 5. Restart the IIS Server.
    >
    > Hope this helps someone.
    The above is only valid for XIR2, these application directories do not exist in 3.1
    This appears to be a bug
    Regards,
    Tim

  • ZENworks Reporting Java Infoview error

    We are getting an error when trying to launch our reporting server. It was working properly about 2 weeks ago, but we hadn't tried it since until now. I have tried restarting all the zen services and the whole server, recreating the super admin accounts, and manually starting BobjEnterprise120 from the /etc/init.d directory. We are runing ZCM 10.2. attached is the exception output of the zcc.log.
    Thank you for any other suggestions.
    Mike Boring
    Perry Local Schools

    The firewall on our server is disabled. Is there anyway to see what process is causing the conflict on the start port? I have looked in the output of netstat and i'm not seeing anything listen on the 6400 port. Any other thoughts? We were really hoping to leverage the reporting server feature of Zenworks.

  • SSO not working when launching the InfoView application

    We are so close to implementing SSO for BO Edge 3.0 using AD and Kerberos.  We can logon to InfoView and CMC using AD authenication and it works fine.  When turning on SSO:
        <context-param>
            <param-name>sso.enabled</param-name>
            <param-value>true</param-value>
        </context-param>
    in the InfoViewApp web.xml it fails with an error message in the Tomcat stdout.log
    Debug is  true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
    +          [Krb5LoginModule] user entered username: "at"MYCOMPANY.COM+
    User name is missing.
    When done through the application logon screen and able to logon it is
    Debug is  true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
    +          [Krb5LoginModule] user entered username: dennis"at"MYCOMPANY.COM+
    The username appears in the log file followed by the debug message for Kerberos key being created.
    I am so close, does anyone have an idea?

    Hi Tim,
    The Vintela SSO document for BOE XI 3.1 is very comprehensive, but it has not resolved my issue.
    Under NTLM option I SSO works great with .NET InfoView as long as I have the web site authentication set to Windows Authentication and ASP .NET Authentication enabled.  Once the ASP .NET is disabled, SSO does not work.
    When using the Kerberos option, .NET InfoView SSO does not work due to the error 'propagating the security context between the security server and the client'.
    The Java InfoView SSO does not work either, but I can enter my user credentials and logon fine.
    std.out error:
    Debug is  true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
              [Krb5LoginModule] user entered username: @OR.PROVIDENCE.ORG
    Acquire TGT using AS Exchange
              [Krb5LoginModule] authentication failed
    Generic error (description in e-text) (60)
    No user name is being passed.  I've been through a multitude of documents and forums ensuring settings are correct and I believe they are including no duplicate SPN's.
    The only issue on the server is that I cannot open the tomcat confi app. due to it not able to start service BOE120Tomcat.  I was able to update the registry with the info for the bsclogin.config and krb5.ini.  I was not able to find anything on getting that service started.
    Any ideas?  Need more info? I have a bunch. 
    Thanks and have fun,
    Phil

  • ESS/MSS sso configure between java and abap instance

    Dear Gurus,
    I want to configure sso between java and abap instance for ESS/MSS. I couldnt find any guide for it, could you please help me gurus ?
    Other question is, is there any specific role for ESS/MSS users in JAVA instance. I want to create users and assign this role to them.
    Best Regards

    Hi Kemal,
    Hope you are doing good.
    There should be a / in the ITS path before SAP.
    Basically the entry that you have mentioned here should be accessible via browser as well. For eg in your case:
    http://<its hist name>/sap/bc/gui/sap/its/webgui should be accessible over browser.
    I also think you have put in a extra space in "w  ebgui". It should be "webgui".
    If the connector settings are working, then we can be sure that system connection is fine. You do not need to configure ITS settings.
    Also for SSO, refer the SAP note:1083421 and configure the SS0 settings again.
    Please run the SSO2 wizard and then make the automatic connection to
    the abap server. This will solve any inconsistencies on the server
    due to manual interventions.
    Most likely reason for the error is that certificates were loaded
    manually rather than using SSO wizard.
    More help:
    <http://wiki.sdn.sap.com/wiki/display/EP/Troubleshooting+SSO+between+AS-ABAP+and+AS-JAVA>
    The SSO enabling parameters should be set on the R/3 server.
    SSO Logon Ticket-> login/accept_sso2_ticket and login/create_sso2_ticket
    More info:
    <http://help.sap.com/saphelp_nw04/Helpdata/EN/22/41c43ac23cef2fe10000000a114084/frameset.htm>
    Thank you and have a nice day :).
    Kind Regards,
    Hemanth
    SAP AGS

  • [XI 3.1] SSO for InfoView and OpenDocument URL

    Hi,
    We have a question with regard to SSO for OpenDocument URL.
    Can both be configured seperately?
    For example:
    - OpenDocument URL with SSO
    - InfoView without SSO
    Or does InfoView SSO needs to be configured before going to OpenDocument URL SSO?
    Thanks!
    Raf

    Hello,
    So apparently it should be possible to configure SSO only for Open document (while infoview still uses logon).
    We followed the configuration guide <Configuring Vintela SSO in Distributed Environments u2013 Complete Guide> (dec 2008).
    At this point the configuration is not functioning.
    BEFORE the SSO configuration setup : standard situation where open document url > Infoview logon screen (no error message) > authenticate manually > run the reports.
    AFTER SSO configuration.
    - When we try to access the open document url from any workstation, we get the error message "The requested resource (/ull) is not available".
    - When we try to access the open document url from the BO Server, SSO does not work but at least the open document url >  Infoview logon screen with Error message :  "Account information not recognized: Active Directory Authentication failed to log you on. Etc."  Still possible to log on manually at this stage.
    I don't find any posts / documentation concerning the "The requested resource (/ull) is not available", which seems to be the first issue to be solved.
    Any help would be appreciated, thx.

  • HTTP 404 issue whenSSO to InfoView using WindowsAD

    Dear all,
    I got the same issue as Mark Richardson (please read below). I was able to implement this SSO to InfoView using Java SSO (aka Vintela, Kerberos) with Authentication: Windows AD in QA environment. But now in Prod after putting all the settings i got error HTTP 404 like Mark's case below.
    I got 'Credentials obtained' in stdout. And i was able to get a ticket when running kinit. But when client browser tried to open the InfoView URL, i got that HTTP 404 error.
    I've applied all the required settings on client browser as per Tim Ziemba (and also OSS Note).
    Any idea what could be the issue?
    WinAD SSO errors for JAVA InfoView after SP3
    WinAD SSO errors for JAVA InfoView after SP3
    ======================================================================================================
    I had successfully deployed the WinAD SSO configuration for both the .NET and JAVA InfoView as documented in the SAP materials provided by Tim Ziemba and Miles Escow.
    Yesterday, I applied the new BOE-XI (R-3.1) Service Pack 3 on our DEV server...and accepted the RE-DEPLOY WebApplications option during the install.
    The .NET WinAD SSO is working 100% OK at http://<servername>/InfoViewApp/logon.aspx
    However, after I updated all the server.xml and web.xml files as required for the Tomcat55 folders that were overwritten by the service pack - I am getting 404 "The requested resource is not available" errors for both the LogonService and the LogonNoSso.
    http://<servername:8080>//InfoViewApp/logon/logonService.do
    http://<servername:8080>/InfoViewApp/logonNoSso.jsp
    If I comment-out the REALM and FILTER MAPPING sections that are mentioned on Pages 17 and 18 of Tim Ziemba's "Complete" document then I get a Manual Login Screen that works - but no SSO.
    Is it possible that the logonService.do and logonNoSso.jsp are broken by BOE-XI (R-3.1) Service Pack 3, and is there any way to get those components back...?

    Hi Aswin,
    Vintela libraries changed in SP3. Usually a 404 error means:
    - Typo in any of the xml tags (you can check opening it in IE)
    - Typo in the SPN (cannot be found). However, you mention seeing in stdout.log "credentials obtained" so it looks that's fine
    - If you are using keytab, comment those lines in web.xml and use the password in Tomcat > Java
    If nothing mentioned above solve the issue, I will suggest you to enable debug in Tomcat and post here the stdout.log
    Regards,
    Julian

  • AES256 for SSO keytab

    I have set up silent SSO for Crystal Reports Server 2013 (essentially the same as BI 4.1) on Windows Server 2008 and it is working using the wedgetail parameter in the Java options in tomcat, and the following lines in the krb5.ini file:
    default_tgs_enctypes = rc4-hmac
    default_tkt_enctypes = rc4-hmac
    The next step is to take the password out of the Java parameters and set up a keytab file, but the installation standard is to use AES 256 encryption. 
    My questions are:
    1. Is it possible to use AES encryption? I know it was not supported in the past, and
    2. If AES can be used, what are the substitutions needed in krb5.ini and the ktpass command? (The ktpass command has a -crypto parameter with a value of AES256-SHA1 that I assume would be the one I need).

    Hello,
    I think That using AES encryption is not actually directly related to BI Business Objects version used,
    but to the Domain controller system version used for BO AD authentication as explained in Cause
    section of this KBA 1198748 - Active Directory (AD) authentication is not enabled even though it is configured for Java InfoView
    Thanks and Regards,
    Akram.

  • Logon failed error when launching Web Intelligence from InfoView

    After changing the Web Intelligence preferences in BusinessObjects Enterprise XI 3.0 Java InfoView to launch the desktop or rich client option, I get a "logon failed" error message. However, when I launch Web Intelligence Rich Client from 'Start > Programs >...' directly, the same logon information is successful. The logon is set to use Enterprise authentication which is the same logon information used to launch InfoView and Web Intelligence.
    Why does the logon fail when I launch Web Intelligence from InfoView?
    Edited by: Ana on Mar 31, 2009 3:43 PM

    I deleted the report completely and rebuilt it from scratch, and also added names for the data table and data set generated within the project and finally, success!
    Jason, thanks so much for your help which got me moving on this again.

Maybe you are looking for

  • Can I add blog entries with my ipad??

    I started a blog in iWeb on my macbook and then wondered if I could add entries with my iPad and iPhone since I'm not going to be traveling with my macbook.  Trying to do a travel journal via this method. 

  • Cisco 876w: wlan client - routing problem

    I configured a Cisco 876w to connect to an existing WLAN as a client. Now I would like to connect 3 PCs to the 876w which should be able to access the internet via the 876w. Problem: Being at the console (ssh) of the 876w, I can ping hosts in the int

  • Mandatory field in COPA characteristic group not checked

    Hello, I have customized a COPA characteristic group in KEPA transaction entering the product as a mandatory characteristic. Then I have posted a document in FBD9 taking a reference document that does nor have filled the product and the system does n

  • Shutting down windows

    I have got a query.... when i shut my pc down all i get is windows is shutting down screen.. hard disk click as though thet are shutting down then thats it power is still on screen is on and froze windows is shuttin down, is this a mobo problem or wi

  • How to uninstall BTjunkie from Safari???

    Hi, i wonder if there is a way to uninstall BTjunkie toolbar from Safari. Their website only has solutions for IE and FIrefox, and nothing for Safari on the Mac. I thought reinstalling Safari would do it, but it didn't for me. Thank you very much.