Using Crystal Reports Server 2013 with tomcat on Windows Server 2008. Trying to set up silent sign on with AD authentication by following http://scn.sap.com/blogs/josh_fletcher/2012/06/11/active-directory-sso-for-sap-businessobjects-bi4. Things work up to step 9; when I try to test silent single sign on from the browser I get:
Account information not recognized: Active Directory Authentication failed to log you on. Please contact your system administrator to make sure you are a member of a valid mapped group and try again. If you are not a member of the default domain, enter your user name as UserName@DNS_DomainName, and then try again. (FWM 00006)
The tomcat stdout log has the following:
Commit Succeeded
Debug is true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
[Krb5LoginModule] user entered username: @AA.BBB.COM
Acquire TGT using AS Exchange
[Krb5LoginModule] authentication failed
Generic error (description in e-text) (60)
If I put in AD username and credentials, it does work. Re-checked .ini and properties, SPNs, realms, domains; everything seems to be right. Any ideas on how to resolve?
Message was edited by: Charles DiTrani