JBOSS IWA (SPNEGO) and Windows 7

[twocanbazza]

Hi People.

I know this is not specifically a WRS question but there isn't an Admin forum, however this is the closest.

Is there any users out there using SAS9.2M3 (4.3 Portal/WRS ), JBOSS (Running on windows 2008), using Windows 7 IE8 clients. If so are you using Single Sign On ( SSO/IWA )? did you try?.

We have just upgraded to the SAS9.2M3 to ensure windows 7 support, however we have discovered that we can't get SSO working with our Windows 7 clients (It works for XPSP2 clients) after being assured that it would work

Just looking for any tips from the people on the ground.

Cheers

Barry

[PaulHomes]

Hi,

I assume you followed the instructions in http://support.sas.com/resources/thirdpartysupport/v92m3/appservers/IWAJBoss.pdf in which krb5.ini was configured with des-cbc-md5 ?

The DES ciphers are disabled by default in Windows 7 and Windows Server 2008 R2. There is more info on this at http://technet.microsoft.com/en-us/library/dd560670%28WS.10%29.aspx and http://support.microsoft.com/kb/977321

I haven't tried this myself yet, but if it were me I would try one of the following options:

1) Enable the DES ciphers on a test Windows 7 client as explained in the Microsoft links above.

2) ... or switch to RC4-HMAC (supported by default in Windows 7):

a) use -crypto RC4-HMAC-NT in the ktpass command

b) modify the default_tkt_enctypes and default_tgs_enctypes entries in krb5.ini to look like this (where ... means existing content):

...
[libdefaults]
...
default_tkt_enctypes = rc4-hmac
default_tgs_enctypes = rc4-hmac
...

You may also need to increase the size of the maxHttpHeaderSize parameter from 8192 to 32768 in the JBoss configuration file /server/SASServer1/deploy/jboss-web.deployer/server.xml

Which Windows Server 2008 version are you running? Windows Server 2008 or Windows Server 2008 R2? Also which JDK are you using for JBoss? Java 5 or Java 6? I think RC4-HMAC is only available with Java 6 (which is required for SAS 9.2 on Windows 2008 R2 anyway).

I hope this helps. If you do try these then please let me know how you go, because I might have to do the same myself one day soon 🙂

Cheers
Paul
http://platformadmin.com/

[twocanbazza]

Hi Paul.

Thanks for the response.

I didn't actually do the origional install and config for our environment, it was performed by SAS (actually a Qual partner subcontracted in) but that document looks familiar.

I have made the changes to enable DES on the client, if I don't I get a different issue.

I have tried to increase the maxheader value.

We are using Windows 2008 server (not R2), Java 5 (I believe)...

I have an open track with SAS, but as it is not a direct issue with SAS we are making very little progress.

I'll keep you informed

Barry

[qlfon]

Well,
It's not a SAS issue. This is Java, Windows 2008 and JBoss issue.
1. You must use java 1.6 at least 1.6.20 (see http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6851973)
2. You must check out and build appropriate jboss-negotiation-2.0.3.SP03.
Then you will get

[twocanbazza]

I was just about to email the forum to say resolved.

We resolved by upgrading to jboss-negotiation-2.0.3.SP03.

Cheers

Barry

[MaPatRam]

Hi there,

I was doing a search for the following question and came across your posting:

Can WRS 9.4 work with IE8? 

can you please provide me with your feedback?

Greatly appreciated it.

Cheers!

Pat

[Madelyn_SAS]

The 9.4 browsers are listed on this page: SAS 9.4 Support for Web Browsers and Plug-Ins

Officially, IE8 is not one of the supported browsers with 9.4. You can use it but you might encounter some issues.

[MaPatRam]

Hi there,

thanks for your response.  If one was to take the chance and use IE8, is IE8 on XP an issue? and is it better if on Windows 7?