topic Re: JBOSS IWA (SPNEGO) and Windows 7 in SAS Web Report Studio

JBOSS IWA (SPNEGO) and Windows 7

twocanbazza — Mon, 14 Mar 2011 02:38:23 GMT

Hi People.

I know this is not specifically a WRS question but there isn't an Admin forum, however this is the closest.

Is there any users out there using SAS9.2M3 (4.3 Portal/WRS ), JBOSS (Running on windows 2008), using Windows 7 IE8 clients. If so are you using Single Sign On ( SSO/IWA )? did you try?.

We have just upgraded to the SAS9.2M3 to ensure windows 7 support, however we have discovered that we can't get SSO working with our Windows 7 clients (It works for XPSP2 clients) after being assured that it would work

Just looking for any tips from the people on the ground.

Cheers

Barry

Re: JBOSS IWA (SPNEGO) and Windows 7

PaulHomes — Mon, 14 Mar 2011 05:35:34 GMT

Hi,

I assume you followed the instructions in http://support.sas.com/resources/thirdpartysupport/v92m3/appservers/IWAJBoss.pdf in which krb5.ini was configured with des-cbc-md5 ?

The DES ciphers are disabled by default in Windows 7 and Windows Server 2008 R2. There is more info on this at http://technet.microsoft.com/en-us/library/dd560670%28WS.10%29.aspx and http://support.microsoft.com/kb/977321

I haven't tried this myself yet, but if it were me I would try one of the following options:

1) Enable the DES ciphers on a test Windows 7 client as explained in the Microsoft links above.

2) ... or switch to RC4-HMAC (supported by default in Windows 7):

a) use -crypto RC4-HMAC-NT in the ktpass command

b) modify the default_tkt_enctypes and default_tgs_enctypes entries in krb5.ini to look like this (where ... means existing content):

...
[libdefaults]
...
default_tkt_enctypes = rc4-hmac
default_tgs_enctypes = rc4-hmac
...

You may also need to increase the size of the maxHttpHeaderSize parameter from 8192 to 32768 in the JBoss configuration file /server/SASServer1/deploy/jboss-web.deployer/server.xml

Which Windows Server 2008 version are you running? Windows Server 2008 or Windows Server 2008 R2? Also which JDK are you using for JBoss? Java 5 or Java 6? I think RC4-HMAC is only available with Java 6 (which is required for SAS 9.2 on Windows 2008 R2 anyway).

I hope this helps. If you do try these then please let me know how you go, because I might have to do the same myself one day soon 🙂

Cheers
Paul
http://platformadmin.com/

Re: JBOSS IWA (SPNEGO) and Windows 7

twocanbazza — Mon, 14 Mar 2011 21:22:26 GMT

Hi Paul.

Thanks for the response.

I didn't actually do the origional install and config for our environment, it was performed by SAS (actually a Qual partner subcontracted in) but that document looks familiar.

I have made the changes to enable DES on the client, if I don't I get a different issue.

I have tried to increase the maxheader value.

We are using Windows 2008 server (not R2), Java 5 (I believe)...

I have an open track with SAS, but as it is not a direct issue with SAS we are making very little progress.

I'll keep you informed

Barry

Re: JBOSS IWA (SPNEGO) and Windows 7

qlfon — Mon, 28 Mar 2011 20:59:48 GMT

Well,
It's not a SAS issue. This is Java, Windows 2008 and JBoss issue.
1. You must use java 1.6 at least 1.6.20 (see http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6851973)
2. You must check out and build appropriate jboss-negotiation-2.0.3.SP03.
Then you will get

Re: JBOSS IWA (SPNEGO) and Windows 7

twocanbazza — Mon, 28 Mar 2011 22:08:10 GMT

I was just about to email the forum to say resolved.

We resolved by upgrading to jboss-negotiation-2.0.3.SP03.

Cheers

Barry

Re: JBOSS IWA (SPNEGO) and Windows 7

MaPatRam — Tue, 12 May 2015 02:14:41 GMT

Hi there,

I was doing a search for the following question and came across your posting:

Can WRS 9.4 work with IE8?

can you please provide me with your feedback?

Greatly appreciated it.

Cheers!

Pat

Re: JBOSS IWA (SPNEGO) and Windows 7

Madelyn_SAS — Wed, 13 May 2015 20:32:22 GMT

The 9.4 browsers are listed on this page: SAS 9.4 Support for Web Browsers and Plug-Ins

Officially, IE8 is not one of the supported browsers with 9.4. You can use it but you might encounter some issues.

Re: JBOSS IWA (SPNEGO) and Windows 7

MaPatRam — Fri, 15 May 2015 16:51:25 GMT

Hi there,

thanks for your response. If one was to take the chance and use IE8, is IE8 on XP an issue? and is it better if on Windows 7?