Windows NT Authentication type Disabled

Hi,
Windows NT Authentication type Disabled after Insatall SAP Integration kit
Best Regards,
Reddeppa K

NT auth is not an option on a java app server it is only an available dropdown in client tools and IIS (.net) deployments. This means in 3.x it will never be available for the CMC and only available for infoview deployed on IIS. On top of that it should not be used with any of our supported versions of AD The plugin is deprecated and will be removed from the next version of our product. Use the AD plugin it can connect to anything the NT one can and much more.
Regards,
Tim

Similar Messages

"Authentication Type" Window is ghosted out.

Hello to All.....
Hopefully someone can help me out here.
I'm using a Linksys WRT54GS Router.
At the Utility Base Web site. If I click on the "Wireless" tab, then highlight "Advance Wireless Settings"................. My "Authentication Type" is ghosted out. I can't make a selection from the options that I know are available. It's ghosted out at the "Auto" setting position. I believe the options I should have available, are: Auto; and Shared Key. I am using a WPA encryption.

hi , when these kinda wierd issues occur.....the only thing that i can think of is if you have the latest firmware installed on the router....
also is your wireless encrypted as of now ??? let me know what encryption you are using ,....may be able to help you with those details.

User domain\SPFservice is not authorized to perform request using authentication type Negotiate

Hi,
I have installed WAP/SPF in the same domain via express installation. The SPF domain service account is sysadmin on the SPF database. The SPF domain service account is running as identity in IIS application pool. I have registered SPF in
WAP via SPFcomputeraccount\LocalSPFaccount. The LocalSPFaccount is member of the 4 local groups created by the SPF setup. The domain SPF service account is member of the VMM administrators.
When a new tenant want to subscribe to a hosting plan I get an error "One or more errors occurred while contacting the underlying resource providers. The operation may be partially completed. Details: Failed to create subscription".
When I look in the eventviewer of the SPF server in ManagementODataService, I can see "User domain\SPFservice is not authorized to perform request using authentication type Negotiate".
SPF/VMM are both on the latest update rollup. The VMM console is also updated on the SPF server.
I can successfully reproduce the troubleshooting steps from http://blogs.technet.com/b/privatecloud/archive/2013/11/08/troubleshooting-windows-azure-pack-spf-amp-vmm.aspx.

Hi,
During the install it is also asking you to specify groups during the installation (4 x) Is the user you specified als spf runas account also member of those group in the AD?
So you have 4 groups created on the local box by the installation. But also 4 specified during the installation. Check if the account is member of those group(s) as well, reboot the spf and you should be up and running.
Best regards, Mark Scholman. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Error: 1051203: Single Sign On External Authentication is Disabled - When connecting to Essbase Server

We have installed newly EPM Product suite in Windows server.......After loggin into Essbase Administration Services, on connecting to the Essbase servers, i am getting the below error........"Error: 1051203: Single Sign On External Authentication is Disabled"....because of this i am also not able to configure the Data Source in Planning Application..
Error: 1051203: Single Sign On External Authentication is Disabled

Check the essbase.log, do you see the following when Essbase was first started up.
User Migration to Shared Services Completed Successfully and Refresh from Shared Services Starts
Refresh from Shared Services Completed Successfully
If not you may need to stop essbase, rename the essbase.sec and start up again, check the log for the above.
Cheers
John
http://john-goodwin.blogspot.com/

Setting Defualt Authentication type to Enterprise in Full Client - strange

Hi Folks,
I am having issue setting up default authentication type in full client.
My users here use Desktop Intelligence for their reporting. We have configured Windows AD authentication for them and they are logging to one of the server via Citrix where BO Client is installed. When users select Windows AD from the authentication type, for the first time it works well, because, they dont have to enter username or password, as they are logging thru Citrix to the server with their Windows AD account. Now here is what happens, when second time they go in the server, their default type is set to Windows AD as they login to DeskI using AD last time, but this time, the OK button is blurred and to my understanding it becomes active if you enter username or password, which in my situation, they have dont have to.
So they select Windows AD from the drop down button and then the OK button is enabled. This is not right as they are already in Windows AD mode. So I thought to make the defualt authentication mode to Enterprise, no matter whatever they login lastly. This way they will have to select Windows AD and the problem will go away. Or if someone knows how to resolve my situation, please advice. Otherwise, please help me how and where can I set the autheication type to Enterprise by defualt for full client. I have only client products installed on this particular server.
Thanks a lot,
Bhaumik
BOXIR2 SP2 full version, Citrix

The ok button thing was a bug fixed in SP3. Now beware SP3 and above SP's client version have another bug which breaks all clients using AD/LDAP fixed in FP3.3. The server version of the SP does not have that bug. If you fix the bug you will not have to set the enterprise type.
It's by design to remember that last login (that may be something you can stop but I never tried and don't know how to).
Regards,
Tim

Windows Native Authentication from Windows 7

Has anyone successfully tested SSO with Windows Native authentication from a windows 7 client ?
I have a working setup with SSO on OID 10.1.4.3 but with windows 7 client I get the fallback login prompt instead of automatic login.
I have got a workaround from support but it still does not work:
- on the client Windows7 PC to to PC security policies (Policies -> Network Security -> Configure encryption types allowed for Kerberos) and select all of them EXCEPT the “Allow future types” option;
- change the value of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SuppressExtendedProtection = REG_DWORD with a value of 3 (please take a backup of the registry settings before any change).
Thanks // Kerstin

Apply patch 6915917 solves the problem

Authentication types

On our Email server, SSL is not yet used.
I want to allow only Kerberos and CRAM-MD5 for SMTP and IMAP and Kerberos and APOP for POP. I want to disable Login, PLAIN and Clear authentication types. I noticed that these settings work in Apple's Mail client. But not in Outlook Express and MS-Outlook. How to configure these clients to check for Kerberos and CRAM-MD5 only ? Is it even possible ?

EAP-Fast or LEAP are probably your best shot.
Good Luck
Scott

Authentication type is pap

I have a switch setup to use radius. I have the aaa-new model list applied to my console and telnet ports, but they only work with pap. If I try chap in my remote access policy, login is not allowed, and the radius server's event viewer reads, incorrect authentication type. If I allow pap at the remote access policy, it works fine. I don't know how to change the authentication protocol used on the console and telnet ports. Can you change it? I know you can change it on serial interfaces with ppp. Isn't telnet clear text only? If so, what good is radius when trying to account for who has been accessing, and who is allowed to access the cisco equipment via telnet or the console? I don't want active dir domain account's passwords being sent clear text. Is there a better alternative?
thank you,

I think I found the answer to part of my question in the CCSP SECUR text, "If you are using the Windows NT or Windows 2000 user database to authenticate users, you must use PAP password encryption" Further down, "If you are using the Cisco Secure ACS for Windows users databse for authentication, you can use either PAP or CHAP."

WLS .2 MP1: Windows NT authenticator on LINUX

We have configured Windows NT authenticator on a LINUX host and getting below error. Would like to know if it can be configured for Linux OS or is it specific to Windows OS only.
If we can configure it on Linux OS, which library is it missing here?
Weblogic Version : 9.2 MP1
config.xml entry:
<sec:authentication-provider xsi:type="wls:windows-nt-authenticatorType">
ERROR:
<Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: java.lang.UnsatisfiedLinkError: no wlntauth in java.library.path
java.lang.UnsatisfiedLinkError: no wlntauth in java.library.path
at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1682)
at java.lang.Runtime.loadLibrary0(Runtime.java:822)
at java.lang.System.loadLibrary(System.java:993)
at weblogic.security.providers.authentication.NTAuthenticatorDelegate.loadlib(NTAuthenticatorDelegate.java:1847)
at weblogic.security.providers.authentication.NTAuthenticatorDelegate.updateConfigSettings(NTAuthenticatorDelegate.java:534)
Truncated. see log file for complete stacktrace

The same trouble. Is it possible to setup Windows NT Authentication on LINUX based server?

Windows Native Authentication with 2 (multiple) AD domains

I have managed to get Windows Native Authentication for Oracle Application Server 10g (9.0.4) on Windows working. The following has been done and works in a test environment:
Phase 1) Active Directory (AD) to Oracle Internet Directory (OID) Synchronization
Phase 2) Configure a Kerberos Service Account for the Single Sign-on
Currently all the above setup points to a single windows active directory server, i.e. active1.uk.oacle.com. This is acceptable for a test environment, but before the changes can be deployed to production I need to incorporate some disaster recovery.
The active directory is replicated across multiple servers – i.e. active1.uk.oacle.com, active2.uk.oacle.com. In the event that the primary active directory server is unavailable Oracle users should still be able to access applications. I need to incorporate active2.uk.oacle.com into the above setup.
Questions:
1)Can I get away with not incorporating active2.uk.oacle.com into phase 1. If the users have been pulled into OID then we are not particular concerned with pulling in new users in a disaster situation.
2)Can I configure the Oracle side of the Kerberos setup to use multiple realms with an order or precedence – i.e. try active1.uk.oacle.com, then try active2.uk.oacle.com. I would generate a keytab file from each server.
Ideally I would like to just modify the Kerberos setup to check active1.uk.oacle.com then active2.uk.oacle.com. Is this a workable approach? If yes how do I proceed? I believe the krb5.ini and opmn.xml need to be amended.
Thanks

Does anyone have any ideas on how to do this????

Windows domain authentication on Oracle Secure Global Desktop

Hello,
I made an upgrade of my oracle secure global desktop 4.62 version to 5.1 version.
The problem is, I was using Windows Domain Authentication in 4.62 and this kind of authentication is not available in the 5.1 version.
So now, my users cannot log in the application.
Do you have a solution ?
Thanks

What are you authenticating to specifically? An AD server? Are you using any of the supported authentication mechanisms now supported?
http://docs.oracle.com/cd/E41492_01/E41495/html/sgd-authentication.html#system-authentication-mechanisms-table

Windows Integrated Authentication on an ABAP data source

Dear Experts,
I have to implement Windows Integrated Authentication in my portal. By using Kerberos & SPNEGO, we can implement very easily if portal user id & windows (ADS) user id is same. But my scenario is windows id & portal id is different & data source is already configured as ABAP. Can you suggest me how we can achieve this requirement.
Regards,
VENU

Hi,
isnt the property krb5principalname used to define the mapping of the user ID when you cannot use the AD standard samaccountname?
I think that the mapped user ID (as provided by krb5principalname) must be identically with the ABAP userID. When the ABAP user ID isn't present in the LDAP information, SSO won't be possible. Somehow he needs to publish the ABAP user ID into the AD.
SAP Help:
http://help.sap.com/SAPHELP_NW70EHP1/helpdata/EN/43/4c363ac31e30f3e10000000a11466f/frameset.htm
http://help.sap.com/SAPHELP_NW70EHP1/helpdata/EN/43/4c3725aeaf30b4e10000000a11466f/frameset.htm
br,
Tobais

Using OLAP Connection for SAP BW based on authentication type Prompt

We try to use an OLAP Connection based on authentication type Prompt. This should cause a dialog to popup where the user can enter credentials for SAP BW. This works fine for Analysis for OLAP, but not in Web Intelligence and Design Studio.
In design studio the following message appears:
failed to connect to "BA1CLNT100"
Configuration of destination
customized_guid:FnTHdVPWmQ4AMLQAAD4XL4cAAFBWmWVp is incomplete:
Parameter user id missing: neither user nor user alias nor sso ticket nor certificate is specified.
Does anyone know if this feature is supported and what causes this error?

Hi,
Can you check the option "Disallow insecure incoming RFC connections" from CMC >> SAP Authentication and see if it helps.
-Ambarish-

Problem in CMC login with SAP authentication type

Hi,
We have installed the SAP Integration kit successfully for BO XI R2 & when I logon to CMC i am able to enable the SAP authentication and import the roles from the SAP BW system as well. But when I try to login into CMC using the 'Authentication type' as SAP it doesn't display the textboxes for entering System ID and Client details. Can you please tell me how to fix this?
Also I see that the CMC & Infoview authentication type drop down list are not the same. The CMC has the authentication types available as 'SAP,LDAP & Enterprise' where as Infoview has 'Enterprise, LDAP & AD'.
Is this an issue with the Plugins? do i need to do some settings on the Tomcat ?
Please help me out in this..
Thanks in advance!
Phani.

Thanks for your update Jac...yes thats correct. Also I had to include authPlugExt.properties file in the tomcat/shared/classes, which i did not include previously. The SAP infoview is working fine now.
Just one more question, in CMC login doesn't the SAP authentication require sap system & client id as its inputs? (in XI R2). I noticed that I was able to login with SAP user id's (without mentioning system details) , that have been added when I have imported the SAP roles to BO.

How can I use authentication type in sending/receiving a message

Dear all,
I am building a mail client program. I have a problem: I don't know use javamail to authenticate to mail server in while send/receive messages. I know some authentication types as PLAIN, LOGIN, CRAM-MD5, DIGIT-MD5, NTLM and GSSAPI. and I tried use "mail.imap.sasl.mechanisms" property, but it do not work. Any suggestion is helpful for me. Thanks!

Thank for quick your reply,
I checked with Imap protocol to receive message. The mail server supported authentication type: Plain and Login. Below is code:
      Properties props = System.getProperties();
      String socketFactoryClass = "javax.net.SocketFactory";
      String host = account.getIncomingHost();
      int port = Integer.valueOf(account.getIncomingPort());
      String fallback = "mail.imap.socketFactory.fallback";
      String imapSocketFactoryClass = "mail.imap.socketFactory.class";
      String emailAddress = account.getIncomingUser();
      props.put("mail.mime.base64.ignoreerrors", "true");
      if (account.isIncomingSsl()) {
        MailSSLSocketFactory socketFactory = this.getSSLSocketFactory(host);
        if (account.getSecureAuthsIncoming().equalsIgnoreCase("starttls"))
          props.put("mail.imap.starttls.enable", true);
        else
          props.put("mail.imap.ssl.enable", "true");
        props.put("mail.imap.ssl.socketFactory", socketFactory);
        props.put("mail.imap.sasl.mechanisms", account.getAuthMechsIncoming());
      props.put(fallback, "false");
      props.put(imapSocketFactoryClass, socketFactoryClass);
      Session session = Session.getInstance(props, null);
      String protocolName = "imap";
      if (Utils.isGmailAccount(emailAddress))
        protocolName = imaps;
      IMAPStore imapStore = (IMAPStore) session.getStore(protocolName);
      try {
        imapStore.connect(host, port, emailAddress, account.getIncomingPassword());
      } catch (Exception e) {.....}account.getAuthMechsIncoming() return authentication types, this instance is Login or Plain(as I tested). By the way, I have a problem how to check authentication types supported by server(as Evolution Mail on Ubuntu has)?. sorry for my English. Thank for your consider time.

Windows NT Authentication type Disabled

Similar Messages

Maybe you are looking for