After configuring Service Catalog and Apache Software Load Balancer for single sign-on, I receive Windows Security pop-up window requesting username and password.

book

Article ID: 50457

calendar_today

Updated On:

Products

CA IT Asset Manager CA Software Asset Manager (CA SAM) ASSET PORTFOLIO MGMT- SERVER Service Accounting SERVICE ASSURE CA Service Catalog CA Service Management - Service Desk Manager CA Unicenter NSM

Issue/Introduction

Description:

After configuring Service Catalog and Apache Software Load Balancer for single sign-on (as per Chapter 3 of the Implementation Guide), you may receive the following Windows Security pop-up window requesting username and password when accessing the load balancer URL ( http://<hostname>:89/usm):

<Please see attached file for image>

Figure 1

After providing appropriate domain credentials you are correctly logged into Service Catalog.

Solution:

As per page 90 of the Implementation Guide the following section has been appended to <APACHE_Home>\conf\httpd.conf:

LoadModule sspi_auth_module modules/mod_auth_sspi.so 
<Location ~ "/usm/(wpf|documents|FileStore)">AuthName "domain_name" 
AuthType SSPI 
SSPIAuth On 
SSPIOfferBasic On 
SSPIAuthoritative On 
SSPIDomain "domain_name" 
SSPIofferSSPI off 
require valid-user 
</Location>

Change the 'SSPIofferSSPI' attribute to 'On' as follows:

LoadModule sspi_auth_module modules/mod_auth_sspi.so 
<Location ~ "/usm/(wpf|documents|FileStore)"> 
AuthName "domain_name" 
AuthType SSPI 
SSPIAuth On 
SSPIOfferBasic On 
SSPIAuthoritative On 
SSPIDomain "domain_name" 
SSPIofferSSPI On
require valid-user 
</Location>

Once this change has been made, recycle the Apache2 service from either services.msc or the Apache Monitor.

Environment

Release: USVACT99000-12.5-Service Accounting
Component:

Attachments

1558698950515000050457_sktwi1f5rjvs16og0.gif get_app