Comments on: Active Directory SSO with Vintela in XI 3.1 http://geek2live.net/posts/active-directory-sso-with-vintela-in-xi-3-1/ Ravings of a Business Intelligence Consultant Wed, 25 Apr 2012 13:03:57 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: Joshua Fletcher http://geek2live.net/posts/active-directory-sso-with-vintela-in-xi-3-1/comment-page-1/#comment-777 Joshua Fletcher Thu, 23 Feb 2012 03:13:41 +0000 http://geek2live.net/?p=94#comment-777 Hey Leo, I'm not sure about whether the alternate encryption method works - best bet is to log a call with SAP Support to confirm. Kind regards, Josh Hey Leo,

I’m not sure about whether the alternate encryption method works – best bet is to log a call with SAP Support to confirm.

Kind regards,

Josh

]]> By: Leo http://geek2live.net/posts/active-directory-sso-with-vintela-in-xi-3-1/comment-page-1/#comment-776 Leo Wed, 22 Feb 2012 15:30:51 +0000 http://geek2live.net/?p=94#comment-776 Hi, I have followed all the steps, but cannot get past step 10, I cant SSO Login to Designer or Deski. I had to use another encryption method for the ktpass, though: des-cbc-crc and have also put it in the krb5 file. whenever I try to login, i get the following error: Your login id is not valid - [repo_proxy 13] SessionFacade::openSessionLogon with user info has failed(Internal error.(hr=#0x80042a01) Also using the AD Login credentials does not work. Do you have any ideas? Thanks! Leo Hi,
I have followed all the steps, but cannot get past step 10, I cant SSO Login to Designer or Deski.
I had to use another encryption method for the ktpass, though: des-cbc-crc and have also put it in the krb5 file.
whenever I try to login, i get the following error: Your login id is not valid – [repo_proxy 13] SessionFacade::openSessionLogon with user info has failed(Internal error.(hr=#0x80042a01)

Also using the AD Login credentials does not work.
Do you have any ideas?
Thanks! Leo

]]> By: Joshua Fletcher http://geek2live.net/posts/active-directory-sso-with-vintela-in-xi-3-1/comment-page-1/#comment-252 Joshua Fletcher Tue, 25 Oct 2011 12:07:40 +0000 http://geek2live.net/?p=94#comment-252 Hi Sarang, You can find the BI4 AD SSO tutorial (incl video) at http://geek2live.net/posts/active-directory-sso-for-sap-businessobjects-bi4/. Thanks, Josh Hi Sarang,

You can find the BI4 AD SSO tutorial (incl video) at http://geek2live.net/posts/active-directory-sso-for-sap-businessobjects-bi4/.

Thanks, Josh

]]> By: Joshua Fletcher http://geek2live.net/posts/active-directory-sso-with-vintela-in-xi-3-1/comment-page-1/#comment-251 Joshua Fletcher Tue, 25 Oct 2011 12:07:17 +0000 http://geek2live.net/?p=94#comment-251 Hi Adi, My BI4 AD SSO tutorial can be found at http://geek2live.net/posts/active-directory-sso-for-sap-businessobjects-bi4/. Thanks, Josh Hi Adi,

My BI4 AD SSO tutorial can be found at http://geek2live.net/posts/active-directory-sso-for-sap-businessobjects-bi4/.

Thanks,

Josh

]]> By: Joshua Fletcher http://geek2live.net/posts/active-directory-sso-with-vintela-in-xi-3-1/comment-page-1/#comment-249 Joshua Fletcher Wed, 19 Oct 2011 08:10:49 +0000 http://geek2live.net/?p=94#comment-249 Hi Sarang, Yes definitely - it is in the works, and I also plan on doing a video overview at http://dslayer.net/ as well. Kind regards, Josh Hi Sarang,

Yes definitely – it is in the works, and I also plan on doing a video overview at http://dslayer.net/ as well.

Kind regards,

Josh

]]> By: Sarang http://geek2live.net/posts/active-directory-sso-with-vintela-in-xi-3-1/comment-page-1/#comment-247 Sarang Mon, 17 Oct 2011 19:29:54 +0000 http://geek2live.net/?p=94#comment-247 Josh, Any plans on putting together a similar cheat sheet for BI4/Vintela SSO anytime soon? Josh,

Any plans on putting together a similar cheat sheet for BI4/Vintela SSO anytime soon?

]]> By: Joshua Fletcher http://geek2live.net/posts/active-directory-sso-with-vintela-in-xi-3-1/comment-page-1/#comment-240 Joshua Fletcher Tue, 20 Sep 2011 07:41:02 +0000 http://geek2live.net/?p=94#comment-240 Hi Andrew, That's an interesting one. I've found that substituting the service account with the SPN or vice versa sometimes works, but I don't know enough about AD to understand :) Cheers Josh Hi Andrew,

That’s an interesting one. I’ve found that substituting the service account with the SPN or vice versa sometimes works, but I don’t know enough about AD to understand :)

Cheers Josh

]]> By: AndrewB http://geek2live.net/posts/active-directory-sso-with-vintela-in-xi-3-1/comment-page-1/#comment-239 AndrewB Tue, 20 Sep 2011 07:12:54 +0000 http://geek2live.net/?p=94#comment-239 I had a few problems and followed Tim's document (relating to SP3 or later). I had to change the idm.princ to be the service account rather than the SPN. Not sure why or if that's changed - any thoughts? I had a few problems and followed Tim’s document (relating to SP3 or later). I had to change the idm.princ to be the service account rather than the SPN.
Not sure why or if that’s changed – any thoughts?

]]> By: Adi http://geek2live.net/posts/active-directory-sso-with-vintela-in-xi-3-1/comment-page-1/#comment-236 Adi Tue, 16 Aug 2011 16:56:12 +0000 http://geek2live.net/?p=94#comment-236 Thanks Josh. That's what i assumed, but with these java things you never know what to expect. :) Anyhow, I am at lost with this thing so i will take your advice and open a ticket with SAP. Cheers. Adi Thanks Josh. That’s what i assumed, but with these java things you never know what to expect. :) Anyhow, I am at lost with this thing so i will take your advice and open a ticket with SAP.
Cheers.
Adi

]]> By: Joshua Fletcher http://geek2live.net/posts/active-directory-sso-with-vintela-in-xi-3-1/comment-page-1/#comment-235 Joshua Fletcher Tue, 16 Aug 2011 03:10:43 +0000 http://geek2live.net/?p=94#comment-235 Hi Adi, no problem. KTPASS is an AD executable, which can be deployed on any Windows machine. It'll then authenticate to AD automatically. So short answer is yes, it can be run on the BOE servers no problem. Cheers, Josh Hi Adi, no problem. KTPASS is an AD executable, which can be deployed on any Windows machine. It’ll then authenticate to AD automatically. So short answer is yes, it can be run on the BOE servers no problem.

Cheers, Josh

]]>