After configuring Service Catalog and Apache Software Load Balancer for single sign-on, I receive Windows Security pop-up window requesting username and password.

Article Id: 50457

Status: Published

Updated On: 21-03-2018 06:12

Legacy Id: TEC548532

Products:

CA IT Asset Manager , CA Software Asset Manager (CA SAM) , ASSET PORTFOLIO MGMT- SERVER , Service Accounting , SERVICE ASSURE , CA Service Catalog , CA Service Management - Asset Portfolio Management , CA Service Management - Service Desk Manager

Issue/Introduction:

Description:

After configuring Service Catalog and Apache Software Load Balancer for single sign-on (as per Chapter 3 of the Implementation Guide), you may receive the following Windows Security pop-up window requesting username and password when accessing the load balancer URL ( http://<hostname>:89/usm):

<Please see attached file for image>

After providing appropriate domain credentials you are correctly logged into Service Catalog.

Solution:

As per page 90 of the Implementation Guide the following section has been appended to <APACHE_Home>\conf\httpd.conf:

LoadModule sspi_auth_module modules/mod_auth_sspi.so 
<Location ~ "/usm/(wpf|documents|FileStore)">AuthName "domain_name" 
AuthType SSPI 
SSPIAuth On 
SSPIOfferBasic On 
SSPIAuthoritative On 
SSPIDomain "domain_name" 
SSPIofferSSPI off 
require valid-user 
</Location>

Change the 'SSPIofferSSPI' attribute to 'On' as follows:

LoadModule sspi_auth_module modules/mod_auth_sspi.so 
<Location ~ "/usm/(wpf|documents|FileStore)"> 
AuthName "domain_name" 
AuthType SSPI 
SSPIAuth On 
SSPIOfferBasic On 
SSPIAuthoritative On 
SSPIDomain "domain_name" 
SSPIofferSSPI On
require valid-user 
</Location>

Once this change has been made, recycle the Apache2 service from either services.msc or the Apache Monitor.

Environment:

Release: USVACT99000-12.5-Service Accounting
Component:

1558698950515000050457_sktwi1f5rjvs16og0.gif

Download