We are trying to establish SSO between windows and portal using kerberos authentication.
We have gone through the following link:
Still that is not clear.
Can anyone suggest what are the steps to achieve this task?
Also can anyone let us know what is KDC and SPNegoLoginModule? Is that anything that has to be downloaded?
Is there any step by step guide to achieve this task?
Traditionally, SSO between windows and portal using kerberos has been done with IIS and IISProxy filter. This is however not supported any more.
From EP6 SP15 SPNegoLoginModule is the way to go.
There are several weblogs and forum post on this, though most if not all describe the deprecated method. Example
For the new method <a href="http://help.sap.com/saphelp_nw04/helpdata/en/43/49a2aefd975f89e10000000a1553f6/frameset.htm">http://help.sap.com/saphelp_nw04/helpdata/en/43/49a2aefd975f89e10000000a1553f6/frameset.htm</a> seems to be a good starting point.
For kerberos information see http://en.wikipedia.org/wiki/Kerberos_%28protocol%29
BTW: KDC is Key Distribution Center and is usually your domain controller AD server
Thanks for your reply.
I have already gone through those blogs.But that talks about windows authentication using IIS proxy module.Currently IIS proxy modelue is out of maintainence.
Thats why we are using kerberos authentication.
Already i have gone through those help.sap.com links.
Currently we are working in SP14,EP6.0,IIS5.1,WebAS 6.40.
I want to know that whether anything has to be installed (prerequisites) in my machine for that KDC and SPNegologimodule.
We dont have any AD server as you mentioned.