cancel
Showing results for 
Search instead for 
Did you mean: 

SSO not working

saurabh_pathak
Active Contributor
0 Kudos

I have Crystal Report Server 2008 Sp3  where I am trying to configure SSO using Windows AD - Kerberose for Infoview.

I have followed all the necessary steps for configuring SSO on Windows Server 2008.

I can login to Infoview using domain user, the only broken piece is it still prompts me user credentials.

I have enabled logging and following is the error that appears in stdout

13-02-13 16:57:57:827 - {ERROR} [/InfoViewApp].[action] Thread [http-8080-Processor23];  Servlet.service() for servlet action threw exception

java.lang.IllegalStateException

          at org.apache.catalina.connector.ResponseFacade.sendError(ResponseFacade.java:418)

          at javax.servlet.http.HttpServletResponseWrapper.sendError(HttpServletResponseWrapper.java:117)

          at com.businessobjects.sdk.credential.WrappedServletResponse.sendError(WrappedServletResponse.java:30)

          at com.wedgetail.idm.sso.AbstractAuthenticator.writeAuthenticationChallenge(AbstractAuthenticator.java:1936)

          at com.wedgetail.idm.sso.MechChecker.authenticate(MechChecker.java:147)

          at com.wedgetail.idm.sso.AbstractAuthenticator.authenticate(AbstractAuthenticator.java:1444)

          at com.wedgetail.idm.sso.AbstractAuthenticator.checkAuthenticationOnly(AbstractAuthenticator.java:1330)

          at com.wedgetail.idm.sso.AbstractAuthenticator.checkAuthentication(AbstractAuthenticator.java:1139)

          at com.wedgetail.idm.sso.AuthFilter.doFilter(AuthFilter.java:148)

          at com.businessobjects.sdk.credential.WrappedResponseAuthFilter.doFilter(WrappedResponseAuthFilter.java:66)

          at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)

          at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)

          at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)

          at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)

          at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)

          at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)

          at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)

          at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)

          at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)

          at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)

          at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)

          at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)

          at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)

          at java.lang.Thread.run(Thread.java:595)

Upon searching the error I found that maxHttpHeadersize has to increased so I changed it to 65536.

Anything else that I should be doing?

Thanks,

Saurabh

View Entire Topic
DayaJha
Active Contributor
0 Kudos

Hi Saurabh,

Please follow the steps again. Because issue is regarding following reason:

  • Configuration of Web.XML File
  • Configuring Manual AD authentication to Java Application Servers
  • Configuring BI Launch Pad and CMC for manual AD login

For Yopur reference Please see the below URL:

Configuring Active Directory Manual Authentication and SSO for BI4:

http://blog.jamiebaldanza.org/wp-content/uploads/2012/04/Crystal-2011-AD-Authentication.pdf

Configure Windows AD Authentication For SAP Business Objects Enterprise XIR3.1:

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/40f4abf5-4d67-2e10-e48b-8db2cac73...

Configuring Business Objects Enterprise XI 3.1 InfoView with Active Directory (plus SSO) using Kerberos in a .NET Environment:

http://www.sdn.sap.com/irj/boc/go/portal/prtroot/docs/library/uuid/9030bb59-079d-2b10-f8b9-967403481...

Hope this help you as well. After completion of your activity please close the thread.

 

Thanks,

Daya

saurabh_pathak
Active Contributor
0 Kudos

Thanks for the quick response Daya.

I have checked everything but nothing seems to help

I am ruling out Configuring BI Launch Pad and CMC for manual AD login as its working.

When you say following could you please shed some more light:

  • Configuration of Web.XML File
  • Configuring Manual AD authentication to Java Application Servers

I think I can rule out above as well but just want to be sure if I am not missing anything.

Thanks,

Saurabh

DayaJha
Active Contributor
0 Kudos

Hi Saurabh,

By Mistake it was written Web.XML it was "Server.XML"

Please follow the steps again. Because issue is regarding following reason:

  • Configuration of Server.XML File

Steps For Server.XML Changes:

Stop Tomcat. Modify C:\Program Files (x86)\SAP BusinessObjects\Tomcat6\conf\server.xml, by adding ‘maxHttpHeaderSize=”65536in Connector Port 8080 tag

  • Configuring Manual AD authentication to Java Application Servers

      

       Steps For Configuring Manual AD Authentication to Java Application Please Refer Page Number 12 of below URL

     

       http://blog.jamiebaldanza.org/wp-content/uploads/2012/04/Crystal-2011-AD-Authentication.pdf

  • Configuring BI Launch Pad and CMC for manual AD login

       Steps For Configuring BI Launch Pad and CMC for manual AD login Please Refer Page Number 15 of below URL

      http://blog.jamiebaldanza.org/wp-content/uploads/2012/04/Crystal-2011-AD-Authentication.pdf

Hope this help you as well. After completion of your activity please close the thread.

 

Thanks,

Daya

saurabh_pathak
Active Contributor
0 Kudos

Hi Daya,

Thanx for your valuable inputs so far, but I am afraid that I will not be able to close the thread as the issue still persist.

You must go through the description of the issue as I have already mentioned about increasing the maxHttpHeadersize.

Moreover please understand that I am not using BI 4.0 or CR Server 2011. it's CR Server 2008, though steps for configuration are more or less same.

I have verified that java can successfully receive a kerberos ticket.

So both the possibilities can be ruled out.

Can someone else please suggest?

Thanks,

Saurabh