Windows AD Problems FWM 00006

Question

Hi,
I tried to find a solution at before posts but i couldn't.
So we are trying to configure Windows AD authentification.
We have created SPN and it seems work fine.
We have created  krb5.ini and bsclogin.conf
We validate using kinit and klist and it seems work fine.
If we import users on cmc we get all users for a Windows AD group, but validation doesn't work. Everytime says the FW0006 error.
There is a step that we couldn't do. It was in delegation tab check This user for delegation  to any services (Kerberos Only)
I think that is our problem but after doing setspn this tab doesn't appear.
Do you have any idea?
Kind Regards.

Answer 1

Hi Tim,
Thank you for your answer.
I tried to follow your manual "Configuring Vintela SSO in Distributed Environments u2013 Complete Guide" skipping single sign on steps.
I will  try Windows AD first.
Yes, I defined krb5.ini and bsclogin.conf and placed in c:\winnt
krb5.ini
[libdefaults]
default_realm = FERRERGRUPO.INET
dns_lookup_kdc = true
dns_lookup_realm = true
[realms]
FERRERGRUPO.INET = {
kdc = xxxxx.FERRERGRUPO.INET
default_domain = FERRERGRUPO.INET
bsclogin.conf
com.businessobjects.security.jgss.initiate {
com.sun.security.auth.module.Krb5LoginModule required;
In Cmc the users were imported correctly, and checking kinit I get a certification looks ok.
In AD Server.setspn command was executed to define Service Principal Names.
Thanks for helping me.
Kind Regards