BookmarkSubscribeRSS Feed
Quartz | Level 8
Hi People.

I know this is not specifically a WRS question but there isn't an Admin forum, however this is the closest.

Is there any users out there using SAS9.2M3 (4.3 Portal/WRS ), JBOSS (Running on windows 2008), using Windows 7 IE8 clients. If so are you using Single Sign On ( SSO/IWA )? did you try?.

We have just upgraded to the SAS9.2M3 to ensure windows 7 support, however we have discovered that we can't get SSO working with our Windows 7 clients (It works for XPSP2 clients) after being assured that it would work

Just looking for any tips from the people on the ground.


Rhodochrosite | Level 12

I assume you followed the instructions in in which krb5.ini was configured with des-cbc-md5 ?

The DES ciphers are disabled by default in Windows 7 and Windows Server 2008 R2. There is more info on this at and

I haven't tried this myself yet, but if it were me I would try one of the following options:

1) Enable the DES ciphers on a test Windows 7 client as explained in the Microsoft links above.

2) ... or switch to RC4-HMAC (supported by default in Windows 7):

a) use -crypto RC4-HMAC-NT in the ktpass command

b) modify the default_tkt_enctypes and default_tgs_enctypes entries in krb5.ini to look like this (where ... means existing content):

default_tkt_enctypes = rc4-hmac
default_tgs_enctypes = rc4-hmac

You may also need to increase the size of the maxHttpHeaderSize parameter from 8192 to 32768 in the JBoss configuration file /server/SASServer1/deploy/jboss-web.deployer/server.xml

Which Windows Server 2008 version are you running? Windows Server 2008 or Windows Server 2008 R2? Also which JDK are you using for JBoss? Java 5 or Java 6? I think RC4-HMAC is only available with Java 6 (which is required for SAS 9.2 on Windows 2008 R2 anyway).

I hope this helps. If you do try these then please let me know how you go, because I might have to do the same myself one day soon 🙂

Quartz | Level 8
Hi Paul.

Thanks for the response.

I didn't actually do the origional install and config for our environment, it was performed by SAS (actually a Qual partner subcontracted in) but that document looks familiar.

I have made the changes to enable DES on the client, if I don't I get a different issue.

I have tried to increase the maxheader value.

We are using Windows 2008 server (not R2), Java 5 (I believe)...

I have an open track with SAS, but as it is not a direct issue with SAS we are making very little progress.

I'll keep you informed

SAS Employee
It's not a SAS issue. This is Java, Windows 2008 and JBoss issue.
1. You must use java 1.6 at least 1.6.20 (see
2. You must check out and build appropriate jboss-negotiation-2.0.3.SP03.
Then you will get
Quartz | Level 8
I was just about to email the forum to say resolved.

We resolved by upgrading to jboss-negotiation-2.0.3.SP03.


Calcite | Level 5

Hi there,

I was doing a search for the following question and came across your posting:

Can WRS 9.4 work with IE8? 

can you please provide me with your feedback?

Greatly appreciated it.




The 9.4 browsers are listed on this page: SAS 9.4 Support for Web Browsers and Plug-Ins

Officially, IE8 is not one of the supported browsers with 9.4. You can use it but you might encounter some issues.

Calcite | Level 5

Hi there,

thanks for your response.  If one was to take the chance and use IE8, is IE8 on XP an issue? and is it better if on Windows 7?



Registration is open! SAS is returning to Vegas for an AI and analytics experience like no other! Whether you're an executive, manager, end user or SAS partner, SAS Innovate is designed for everyone on your team. Register for just $495 by 12/31/2023.

If you are interested in speaking, there is still time to submit a session idea. More details are posted on the website. 

Register now!

How to Concatenate Values

Learn how use the CAT functions in SAS to join values from multiple variables into a single value.

Find more tutorials on the SAS Users YouTube channel.

Get the $99 certification deal.jpg



Back in the Classroom!

Select SAS Training centers are offering in-person courses. View upcoming courses for:

View all other training opportunities.

Discussion stats
  • 7 replies
  • 5 in conversation