SAP BOXI 3.1 - Error SSO Vintela

Question

In the stdout.log file I received the following error every time I start Tomcat 5.5:
GRAVE: Exception starting filter authFilter
com.wedgetail.idm.sso.ConfigException: No keytab entries for
BOSSO/[email protected]
in "C:\aaaaa.keytab" at
com.wedgetail.idm.sso.util.Util.getKeyTab(Util.java:114)
at
com.wedgetail.idm.sso.AbstractAuthenticator.initAuthenticator(AbstractAuthenticator.java:440)
at com.wedgetail.idm.sso.AuthFilter.init(AuthFilter.java:105)
at com.businessobjects.sdk.credential.WrappedResponseAuthFilter.init(WrappedResponseAuthFilter.java:56)
at
org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:223)
at
org.apache.catalina.core.ApplicationFilterConfig.setFilterDef(ApplicationFilterConfig.java:304)
at org.apache.catalina.core.ApplicationFilterConfig.<init>(ApplicationFilterConfig.java:77)
at
org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:3634)
at
org.apache.catalina.core.StandardContext.start(StandardContext.java:4217)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
at
org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:904)
at
org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:867)
at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:474)
at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
at
org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
at
org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
at org.apache.catalina.core.StandardService.start(StandardService.java:450)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
5-mar-2014 16.21.02 org.apache.catalina.core.StandardContext start
GRAVE: Error filterStart
5-mar-2014 16.21.02 org.apache.catalina.core.StandardContext start
GRAVE: Context [/Document] startup failed due to previous errors
In the aaa.keytab with the command klist -target aaa.keytab i don't see the server where the aaa.keytab resides.
If i add the server I resolved the error?
let me know
cheers
Paolo

Answer 1

Hi Seb,
now you suggest me to modify the parameter idm.princ with the value HTTP/<name
of load balancer.XXX.YYY.ZZZ>, add  the value -Dcom.wedgetail.idm.sso.password=your_service_account_password
in the java configuration of the two Tomcats.
But the 3rd point? I don't understand why you write Retry by using the FQDN of the LB in the URL.
The value XXX.YYY.ZZZ is my FQDN.
Besides, for the SSO Vintela configuration, i've made changes in web.xml in
the OpenDocument webapps.
One of these changes, it's was to add the following lines:
<init-param>
<param-name>idm.keytab</param-name>
<param-value>C:\WINNT\aaaa.keytab</param-value>
</init-param>
My question is: do i have to comment thaese lines or not?
Regards
Paolo