Readers' comments (15) 
Posted by Tilo Soennichsen on 30 June 2009 at 16:53 Great Book. Thanks for the hard work here some comments: Page: 134 May Add hint -profileName parameter for multi profiles installation C:\IBM\WebSphere\AppServer\bin>setupCmdLine.bat -profileName AppSrv01 Type and missing port information. (guess should be empty) Port number of the Kerberos Key Dstribution Center (kdcPort): Because of comment limit 500 characters I split my comments |
Posted by Tilo Soennichsen on 30 June 2009 at 16:54 Comment2: Page 141 com.ibm.security.spnego.SPN1.hostname but looks like you need com.ibm.ws.security.spnego.SPN1.hostName (missing .ws and Name with capital letter) Your screenshot show the ws right but not the capital letter (may Patch 6.1.0.23 thing) Page 151, the table say com.ibm.security.spnego.isEnabled but looks like you need com.ibm.ws.security.spnego.isEnabled (missing .ws) Your screenshot show it right. |
Posted by Tilo Soennichsen on 30 June 2009 at 16:56 Comment 3 Fig 5-25: I needed to enter the host like http://server.AD1.ibm.com. ---------------------------------------------------- Finally I got it working on extra client. On my one box Demo system I can't use the kinit or WPXT SSO. |
Posted by Mr. Axel Buecker on 30 June 2009 at 21:00 Thanks for your feedback Tilo !!! I will check back with our authors and update the Redbook in the next few days - thanks to Redbooks-on-Demand ;-) the updated version will be available for all new downloads. Axel |
Posted by Mr. Venkatesh Boine on 7 July 2009 at 9:39 Good documents |
Posted by Mr. Venkatesh Boine on 7 July 2009 at 9:41 Am not able to enter into this site,plz send me the details. |
Posted by Tilo Soennichsen on 7 July 2009 at 20:09 Did you get SSO thru Kerberos/SPNEGO with Application Integration BCS running?Standard AppInt work fine but the BCS prompt for log in. I guess because it use some sort of CE connection (/wsi/FNCEWS40MTOM/) Only log I can provide is this Windows Event: (next comment) |
Posted by Tilo Soennichsen on 7 July 2009 at 20:17 Event Type: Warning Event Source: AppIntBCSWord Kerberos SSO must be set up. See your site administrator for more help. WSE594: InitializeSecurityContext call failed with the following error message: The network path was not found. . at Microsoft.Web.Services3.Security.Tokens.Kerberos.KerberosClientContext.InitializeContext(Byte[] inToken) at Microsoft.Web.Services3.Security.Tokens.Kerberos.KerberosClientContext.InitializeContext() |
Posted by Tilo Soennichsen on 7 July 2009 at 20:17 at Microsoft.Web.Services3.Security.Tokens.KerberosToken..ctor(String targetPrincipal, ImpersonationLevel level) at Microsoft.Web.Services3.Security.Tokens.KerberosToken..ctor(String targetPrincipal) at IBM.ECM.OfficeXT.Utilities.LoginUtil.PerformSilentLogin() at IBM.ECM.OfficeXT.Utilities.LoginUtil.SilentLogin() |
Posted by Heinz Drews on 22 July 2009 at 9:35 In chapter 5.2.1 it is listed that Active Directory is used as registry. The WAS 6.1 Info Center (http://publib.boulder.ibm.com/infocenter/wasinfo/v6r1/index.jsp?topic=/com.ibm.websphere.nd.doc/info/ae/ae/csec_SPNEGO_overview.html) does not show this as a requirement, only as the option which guarantees correct principal mapping. Can the statement in the redbook also be understood as a recommendation? |
Posted by Axel Buecker on 27 July 2009 at 22:25 Heinz, let me answer your question on using AD as a registry: The description in this chapter is the prerequsite for the particular scenario introduced in this IBM Redbook (it can also be considered a typical FileNet P8 deployment scenario.) It is not meant as a general practical recommendation or product support statement. (thanks to Satoshi for these details ...) |
Posted by Mr. Naceur Kachaou on 3 Novebmer 2009 at 4:24 SSO FILENET WEBSPHERE |
Posted by Mr. Naceur Kachaou on 3 Novebmer 2009 at 4:26 PROBLEM SSO FILENET |
Posted by Mr. Axel Buecker on 4 Novebmer 2009 at 8:31 Naceur, can you be more precise with your comments please. Do you have a particular software problem or is this meant to be a comment in relation to the Redbook? |
Posted by Ted Bosal on 13 Novebmer 2009 at 7:52 Pleas update the pdf , apply comment2 of Tilo, I spend few hours on troubleshooting . |