After configuring Service Catalog and Apache Software Load Balancer for single sign-on, I receive Windows Security pop-up window requesting username and password.

Products

• CA IT Asset Manager
• CA Software Asset Manager (CA SAM)
• ASSET PORTFOLIO MGMT- SERVER
• Service Accounting
• SERVICE ASSURE
• CA Service Catalog
• CA Service Management - Service Desk Manager
• CA Unicenter NSM

Issue/Introduction

Description:

After configuring Service Catalog and Apache Software Load Balancer for single sign-on (as per Chapter 3 of the Implementation Guide), you may receive the following Windows Security pop-up window requesting username and password when accessing the load balancer URL ( http://<hostname>:89/usm):

<Please see attached file for image>

After providing appropriate domain credentials you are correctly logged into Service Catalog.

Solution:

As per page 90 of the Implementation Guide the following section has been appended to <APACHE_Home>\conf\httpd.conf:

LoadModule sspi_auth_module modules/mod_auth_sspi.so 
<Location ~ "/usm/(wpf|documents|FileStore)">AuthName "domain_name" 
AuthType SSPI 
SSPIAuth On 
SSPIOfferBasic On 
SSPIAuthoritative On 
SSPIDomain "domain_name" 
SSPIofferSSPI off 
require valid-user 
</Location>

Change the 'SSPIofferSSPI' attribute to 'On' as follows:

LoadModule sspi_auth_module modules/mod_auth_sspi.so 
<Location ~ "/usm/(wpf|documents|FileStore)"> 
AuthName "domain_name" 
AuthType SSPI 
SSPIAuth On 
SSPIOfferBasic On 
SSPIAuthoritative On 
SSPIDomain "domain_name" 
SSPIofferSSPI On
require valid-user 
</Location>

Once this change has been made, recycle the Apache2 service from either services.msc or the Apache Monitor.

Environment

Release: USVACT99000-12.5-Service Accounting
Component: