NTLM SSO is not working using IIS

Hi,
We have unable to login to the infoview using SSO getting u201C page canu2019t found u201C error.
1. We can login to the infoview using AD authentication when tomcat as the application server but we are unable to login to the infoview using SSO when IIS as the application server.
2. If we select the option called u201Cintegrated windows Authenticationu201D under internet options then the SSO is not working and if we uncheck the u201Cintegrated windows Authenticationu201D in the internet options then we are able to login to the infoview using SSO.We are able to login to the infoview using SSO on another environments and the working and problematic environments we Configured IIS6, XI2 SP4.
4.We tried to login to the infoview using http://servername instead of entire URL however we are getting error.
5.We restarted IIS but no use.
6.Our admin follow the below options-
Open a registry editor, such as Regedit.exe or Regedt32.exe.
Navigate to:
HKLM\System\CurrentControlSet\Services\HTTP\Parameters
Right-click Parameters, select New | DWORD value, and then name the value MaxFieldLength.
Right-click Parameters, select New | DWORD value, and then name the value MaxRequestBytes.
In the right pane, double-click MaxFieldLength, and then set its value to 32768 (decimal).
In the right pane, double-click MaxRequestBytes, and then set its value to 32768 (decimal).
Close the registry editor and restart the IIS Admin service for the change to take effect.
But we are getting same problem.
7.We tried to login to the infoview using http://localhost but issue still persists.
8.We installed jakarta redirector.Is this root cause of this issue?
9.We selected intigrated windows authentication under default websites and i am sure i gave all the options under internet information manager.
Any one please help on this.
My environment is-
BOXIR2 SP4,
NTLM SSO,
Windows 2003,
IIS6.

"We tried to login to the infoview using http://servername instead of entire URL however we are getting error"
What's the error using the hostname for SSO with integrated windows authentication enabled on only the infoview virtual directory?
Regards,
Tim

Similar Messages

SSO is not working for an Alias URL but is working for original portal URL

Hello,
We have a BSP running inside the portal and expects authentication.
When I run this BSP using the portal regular address everything is working OK and SSO is working after logging into the portal.
At next step, we have configured an alias for the portal URL at the DNS Server.
When activating the BSP from the alias URL it asks for 2nd authentication. Meaning, SSO is not working after logging into the portal.
I have activated an HTTP trace in order to see why and it seems like when running it from the alias name it recognizes it as a different domain and I assume this is why the authentication is coming up.
I would like to suppress this for the alias URL but don't know how.
I found this UME property on the server:ume.logon.security.relax_domain.level
This UME property controls the amount of sub domains to remove from the server name to obtain the domain for which the logon ticket is valid.
I have changed this property from its default value 1 to 3 (and restarted the server of course) which, in our case, leaves only ourCompany.com for the ticket in the original server URL. Yet, the authentication pop up is still not supressed when browsing through the alias URL.
Any idea what can I do next?
Thanks,
Roy

Hi Dezso,
I found the 401 let me know if I look on it right:
I have an entry node with two subnodes: request and response.
The response has:
<responseStatus>HTTP/1.1 401 Unauthorized</responseStatus>
And the request before that doesn't have any MYSAPSSO2 in it, all it has which is related to cookies is this:
<header name="Cookie">UserUniqueIdentifier=1174345919524; alreadyLogged=1179560552416</header>
<cookies>
<cookie name="alreadyLogged">1179560552416</cookie>
<cookie name="UserUniqueIdentifier">1174345919524</cookie>
</cookies>
Can you advice what to do next?

SSO does not work

Hi...
I'm trying to use SSO between portal (jCo, webdynpro...) and ABAP System...
I follow "Single Sign-On in a Complex System Landscape" tutorial, but when I try to test any jCo connection, this error appears to me:
com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: Failed to enrich connection properties
And following logs, I can see this error:
Cannot provide X.509 certificate of user "Silva, Jose" (unique ID: "USER.PRIVATE_DATASOURCE.un:123456") because of an unexpected UME internal problem. (Backend system: "UMESystemLandscapeDummy")
[EXCEPTION]
com.sap.security.api.umap.NoLogonDataAvailableException: This user does not have a certificate.
at com.sap.security.core.umap.imp.UserMappingDataImp.enrich(UserMappingDataImp.java:412)
at com.sap.tc.webdynpro.serverimpl.core.sl.AbstractJCOClientConnection.createPool(AbstractJCOClientConnection.java:346)
at com.sap.tc.webdynpro.serverimpl.core.sl.AbstractJCOClientConnection.checkPoolEntry(AbstractJCOClientConnection.java:296)
at com.sap.tc.webdynpro.serverimpl.core.sl.AbstractJCOClientConnection.getClient(AbstractJCOClientConnection.java:396)
at com.sap.tc.webdynpro.tools.explorer.JCOConnectionsDetails.onActionTestConnection(JCOConnectionsDetails.java:229)
at com.sap.tc.webdynpro.tools.explorer.wdp.InternalJCOConnectionsDetails.wdInvokeEventHandler(InternalJCOConnectionsDetails.java:303)
at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.invokeEventHandler(DelegatingView.java:87)
at com.sap.tc.webdynpro.progmodel.controller.Action.fire(Action.java:67)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doHandleActionEvent(WindowPhaseModel.java:420)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:132)
at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:313)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:713)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:666)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:250)
at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:387)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:365)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:944)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:266)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
I don't know what to do...
My portal certificate has a problem, or is my abap certificate?
Thanx...
(sorry for my poor english)

Hi,
If you are working with JCO's please make sure that SSO will not work for metadata jco creation.
use the UID PWD method as part of metadata jco creation.
it will work fine
this messege as per my knowledge, may be helpfull for you

I hooked up new iMac to wireless network and now iPad and iPhone do not work using wireless. I am using a Netgear N300 router. Also my Netgear ethernet/homeplug for wireless TV internet no longer works. Any ideas?

I hooked up new iMac to wireless network and now iPad and iPhone do not work using wireless. They did before hooking up the iMac. I am using a Netgear N300 router. Also my Netgear ethernet/homeplug for wireless TV internet no longer works. Any ideas? I have tried unplugging, restarting, and resetting. No luck! Thanks!

You should probalby contact Netgear

Using export slide show from iphoto, I am trying to create a DVD of photos and vid clips in large format. The vid clips do not work using burn software. Any idea?

Using export slide show from iphoto, I am trying to create a DVD of photos and vid clips in large format. The vid clips do not work using burn software. Any idea?

Have used large format, but using the 'burn' software, I am not getting seamless video quality on DVD even though I am burning at 2* speed. Any ideas? Do I need better software? Or is there a problem with the SuperDrive?

When i finally connected my mac to work network on windows environment everything related to apple including App store, Safari, software updates, iCloud and iTunes do not work using a proxy server and everything else is working very well

when i finally connected my mac to work network on windows environment everything related to apple including App store, Safari, software updates, iCloud and iTunes do not work using a proxy server and everything else is working very well including chrome browser…i tried everything but no clue...anybody have solution for this..???

I also forgot to note that this problem also persists with the new iBooks application. I cannot get past the 'Get Started' screen or access the iBooks Store. Again, all top bar menus are unresponsive.
DT

Rewrite module not working in iis 8

Hi All,
I have a SharePoint site hosted in ports 1122 and I have configured alternate access mapping to "http://batman".
Now, I want if some body types "http://batman" then it should get redirected to some other site. For this I am using URL Rewrite module. My rule is
<rule name="Redirect Batman" stopProcessing="true">
       <match url="(.*)" />
           <conditions>
                    <add input="{HTTP_HOST}" negate="true" pattern="^http://batman$" />
           </conditions>
               <action type="Redirect" url="http://sedwdevrtm:11731/{R:1}" redirectType="Permanent" />
   </rule>
which is not working at all. Please suggest something.

Hello Alok,
Can you check if it is related to the rule? You can do this by creating a simple redirect rule without a condition and see if that's working.
Otherwise I would also try posting your question in the IIS forums, like suggested in this thread:
http://social.technet.microsoft.com/Forums/office/en-US/bbbe4bae-0f72-4c28-8aa8-27e5585e3062/sharepoint-ignoring-iis-8-rewrite-rule
- Dennis | Netherlands | Blog |
Twitter

PrinttoPrinter not working in IIS 7

I have a web App that is not working properly when deployed to IIS. The code that I am using is as follows:
crReportDocument.PrintToPrinter(1, True, 0, 0).
This code works in design mode with visual studio on the server, however when deployed on the same machine to IIS it does not work.
I am wondering how to correct this issue?
Your prompt response to this would be greatly appreciated.

Hi Eric
I'll need a bit more info:
Version of CR - please be precise.
Version of .NET
Version of OS?
Speak a bit more to: "...when deployed on the same machine to IIS it does not work.". What does that mean? Describe the behavior / symptom. Error messages?
If this is a critical issue, you may want to consider creating a hone incident here:
Crystal Single Case Technical Support - SAP Business Objects US Online Store | SAP Online Store
- Ludek
Senior Support Engineer AGS Product Support, Global Support Center Canada
Follow us on Twitter

WLC 8500 SSO HA not working

Hi there,
We're running AireOS 8.0 in a WLC 8500 series and we're getting problems trying to enable HA scenario. These are the scenarios we have tested:
management interface tagged + switchport trunk tagged + HA tagged + switchport trunk tagged = SSO not working
management interface tagged + switchport trunk tagged + HA tagged + switchport access = SSO not working
management interface untagged + switchport trunk native vlan + HA untagged + switchport access = SSO not working
No scenario is working and in cases 1 and 2 we are lossing the associated APs and we only recover them in case 3.
In parallel, after enabling tagged interface in management, the "show ip arp" of the switch shows the IP through the HA interface and the ping is lost outwards WLC and inwards.
Any suggestion?
Regards.

Try to delete the config on switch and try this.
Switch config :
interface range <>
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan X,Y,Z
Channel-group <> mode on
Still not working then check if WLC is reachable via ssh or telnet!
if you have access via ash or telnet then reboot WLC by using "reset system" command .
hope it helps.
Regards
Dont forget to rate helpful posts

Safari 5.0.3 on Windows XP Kerberos SSO does not work

Our web application runs on JBoss Server 5 supports Kerberos v5 SSO. We have tested it against Firefox, IE, and Google Chrome, and they all works well.
But Safari 5.0.3 does not work.
Our application sends "WWW-Authenticate: Negotiate" to Safari. Safari always pops up a dialog for name and password. After I typed the name and password, and click Login, Safari send NTLM message (NTLMSSP_NEGOTIATE) to the web application, and login failed.
Someone described that Safari supports Kerberos authentication without any additional configuration.
I do not know what goes wrong with my environment and how to solve this issue. Your help is appreciated.
My Safari 5.0.3 runs on Windows XP Professional Service Pack 3.
Thanks
Guofeng

I'm having the same issue. Have you been able to resolve it?

SSO is not working for SAPGUI for HTML

Hi Experts,
We have configured SSO between EP and ECC.SSO is working fine for SAPGUI for windows.But it is not working for SAPGUI for HTML.
Workflow iViews are getting error.
"SWITCH to HTTPS does not occur."
The domain names are different for EP and ECC.
Please let me know ,is there any settings need to check.
Regards,
Bala.

Hi
The point here is that your Portal server is on a different domain, so you have to configure the logon ticket issuer (portal) to generate logon ticket for multiple domains.
http://help.sap.com/saphelp_nw04s/helpdata/en/a0/88a340fa432b54e10000000a1550b0/frameset.htm
Best regards
Johann

Java program not working using newer version of scheduler (AutoSys)

A little background: I'm in the middle of trying to upgrade our AutoSys server (scheduler) to the latest version (version R4 to R11) and have to do regression testing to ensure our jobs will work in the new version. There's a small java program that is not working supposedly due to the following error:
Exception in thread "Main Thread" java.lang.NoClassDefFoundError: com/f1j/swing/common/JDKAdapter
at com.f1j.swing.common.Adapter.<clinit>(Adapter.java:86)
at com.f1j.swing.engine.ss.JBook.<init>(JBook.java:3032)
at com.f1j.swing.engine.ss.JBook.<init>(JBook.java:3096)
at com.test.Foo.performScan(Foo.java:122)
So in the old version (R4), it runs fine. In R11, I get the exception above. The CLASSPATH matches and I've verified that by echoing it in the shell script that calls the java program. Here's how it's called in the shell script.
echo $CLASSPATH
${JAVA_HOME}/bin/java com.test.Foo
So the Foo class was written by me, which makes use of this external library called f1j11swing.jar (for spreadsheet creation).
The source of the error is from this line in Foo (line 122):
book = new com.f1j.swing.engine.ss.JBook();
The funny part is JDKAdapter (the missing class) is in the same jar file as JBook, so it definitely finds the library in the classpath. But for some reason, this new AutoSys version is spitting out this error. I've exhausted many approaches to resolving this, but I'm still stuck.
Here's the layout of how things are called (should be same for R4 and R11):
1. AutoSys server logs into client machine XYZ as user arnold
2. arnold (AutoSys client) on XYZ executes shell script to call java program
The only significant difference I see is that the AutoSys server in R4 is HP while the R11 server is Sun. However, it shouldn't matter because the client server they're logging into to execute the script is the same linux server.
Does anyone have any ideas? I've already started dialogue with the vendor and it seems kind of in limbo at the moment. Please let me know if you need more info. Thanks.

Hi DrClap,
I just checked jre/lib/ext of my $JAVA_HOME and verified that there doesn't exist any library with a class named "Adapter." We don't put anything in this directory other than what came with the original installation. I've tried isolating the jars before as well, by doing something like (to no avail):
java -cp /users/test/lib/f1j11swing.jar:/users/test/lib/Foo.jar com.test.Foo
If I remove the f1jswing11.jar path in the above command, it will complain about other things. Also, for fun, I tried dropping f1j11swing.jar into the ext folder and removing it from the CLASSPATH and it yielded the original error. Running it directly from the shell and old version of autosys works fine.
I hope I understood your suggestion correctly and please let me know if you have any other ideas. I'm surprised why java would act differently with a different version of an AutoSys client logging into the same machine and environment. Thanks.
xiarce - I haven't heard anything regarding this, but I'll bring it up. Thanks.
Edited by: user4170063 on Apr 13, 2011 2:25 PM

Since last update anything on the first three lines of a web page if it has a a button to click on to go to another page does not work. use Google Crome for fo

Loging onto my bank I go to the barclays pege there on the top line is "log in" it used to work when I click on it but has stoped, any button on the first three lines of a web page does not work.
I now use Google crome but would like to stay with Firefox if this coruption can be sorted.
Rod

Please reload the webpage while bypassing the cache using '''one''' of the following steps:
*Hold down the ''Shift'' key and click the ''Reload'' button with the left mouse key.
OR
*Press ''Ctrl'' + ''F5'' or ''Ctrl'' + ''Shift'' + ''R'' (Windows and Linux)
*Press ''Command'' + ''Shift'' + ''R'' (Mac)
See if this helps solve the issues you had and please report back to us!

SQL Statement not works using functions or subqueries-MAXDB

Hello All,
I created an ABAP program to select information about country(table: T005) with the country names (Table: T005T). I tried to create a sql query with a sql subquery to select everything but for some reason that I don't know it doesn't work. Please find the query below.
DATA:
resu        TYPE REF TO cl_sql_result_set ,
stmt         TYPE REF TO cl_sql_statement ,
qury        TYPE string .
           qury = `SELECT land1, spras, `
           &&       `(SELECT landx `
           &&         `FROM SAPNSP.T005T `
           &&         `WHERE mandt = '` && sy-mandt && `' `
           &&           `AND spras = 'EN' `
           &&           `AND land1 = ? ), `
           &&       `(SELECT natio `
           &&         `FROM SAPNSP.T005T `
           &&         `WHERE mandt = '` && sy-mandt && `' `
           &&           `AND spras = 'EN' `
           &&           `AND land1 = ? ) `
           &&        `FROM SAPNSP.T005 `
           &&        `WHERE mandt = '` && sy-mandt && `' `
           &&          `AND land1 = ? `
           &&        `GROUP BY land1, spras` .
resu = stmt->execute_query( qury ) .
Well, the query above works but the fields LANDX and NATIO are in blank in ALL THE CASES, even with information registred in table T005T.
So, exploring the SDN forum and after read some documents regarding ADBC, I create a function to handle this sql select and get the correctly the missing informations, but, still don't work. Please find the function below:
CREATE FUNCTION select_landx (land1 CHAR(3)) RETURNS CHAR(15)
AS
VAR landx CHAR(15);
DECLARE functionresult CURSOR FOR
SELECT spras, land1, landx
     FROM SAPNSP.t005t
     WHERE spras = 'EN'
         AND land1 = :land1;
     IF $count IS NULL THEN <- | $count is always 0, my SELECT
       BEGIN                                 it's not work but I don't know why
         CLOSE functionresult;
         RETURN NULL;
       END
     ELSE
       SET $rc = 0;
       WHILE $rc = 0 DO
       BEGIN
         FETCH functionresult INTO :landx;
       END;
     CLOSE functionresult;
     RETURN landx;
Calling the function in a SQL statement:
DATA:
resu        TYPE REF TO cl_sql_result_set ,
stmt         TYPE REF TO cl_sql_statement ,
qury        TYPE string .
           qury = `SELECT land1, spras, select_landx(?) landx `
           &&        `FROM SAPNSP.T005 `
           &&        `WHERE mandt = '` && sy-mandt && `' `
           &&          `AND land1 = ? `
           &&        `GROUP BY land1, spras` .
resu = stmt->execute_query( qury ) .
Any comments ?
Best regards,
Arthur Silva

Hello,
Thank's a lot, it works. It's funny because the given solution works using only abap codes.
It may be happens because the abap interpretor send the sql statement to the db interface that handle the code in the another way.
Thanks again, it was driving me crazy.
Best regards,
Arthur Silva

DMTF not working using IP to IP gateway

Hi,
I have a Cisco IP telephony infrastructure with Cisco Call Manager 4.0(2a) and Cisco 7940G series IP Phones. I have implemented "IP to IP gateway" using a Cisco 2651XM router. I have followed the Configuration guide of "IP-IP gateway" during my configuration.
The IP2IPGw is configured for H323-to-H323 and will register with a gateway of an Internet Telephony Service provider (ITSP).
Now when I make an outbound call to a conference bridge, the bridge requests for the code and the digits pressed from my ip phone is not accepted. The same when I do it from a Analog phone using a FXS port, it works.
The IPIPGw document specifies the dtmf-relay is enabled by deafult. I still have configured all available dtmf options, but still no luck.
Please help me in resolving this.
Attached: Config file and Network design.
thanks in advance,
Naveen V

Hi Amrit,
Thanks for your reply.
I had configured the DTMF parameters on the dial-peer's with h245-alphanumeric and also with rtp-nte, but no luck.
I have configured an Inter Cluster Trunk between CCM 4.0 and IP-IP Gateway router. I am not sure if there are any configuration on CCM end related to DTMF.
I even tried the rtp-payload (dial-peer) and is still not working.
Let me know your suggestions on this.
thanks,
Naveen V

NTLM SSO is not working using IIS

Similar Messages

Maybe you are looking for