SSO not working when launching the InfoView application

Question

We are so close to implementing SSO for BO Edge 3.0 using AD and Kerberos.  We can logon to InfoView and CMC using AD authenication and it works fine.  When turning on SSO:
    <context-param>
        <param-name>sso.enabled</param-name>
        <param-value>true</param-value>
    </context-param>
in the InfoViewApp web.xml it fails with an error message in the Tomcat stdout.log
Debug is  true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
+          [Krb5LoginModule] user entered username: "at"MYCOMPANY.COM+
User name is missing.
When done through the application logon screen and able to logon it is
Debug is  true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
+          [Krb5LoginModule] user entered username: dennis"at"MYCOMPANY.COM+
The username appears in the log file followed by the debug message for Kerberos key being created.
I am so close, does anyone have an idea?

Answer 1

Hi Tim,
The Vintela SSO document for BOE XI 3.1 is very comprehensive, but it has not resolved my issue.
Under NTLM option I SSO works great with .NET InfoView as long as I have the web site authentication set to Windows Authentication and ASP .NET Authentication enabled.  Once the ASP .NET is disabled, SSO does not work.
When using the Kerberos option, .NET InfoView SSO does not work due to the error 'propagating the security context between the security server and the client'.
The Java InfoView SSO does not work either, but I can enter my user credentials and logon fine.
std.out error:
Debug is  true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
          [Krb5LoginModule] user entered username: @OR.PROVIDENCE.ORG
Acquire TGT using AS Exchange
          [Krb5LoginModule] authentication failed
Generic error (description in e-text) (60)
No user name is being passed.  I've been through a multitude of documents and forums ensuring settings are correct and I believe they are including no duplicate SPN's.
The only issue on the server is that I cannot open the tomcat confi app. due to it not able to start service BOE120Tomcat.  I was able to update the registry with the info for the bsclogin.config and krb5.ini.  I was not able to find anything on getting that service started.
Any ideas?  Need more info? I have a bunch. 
Thanks and have fun,
Phil