Description:
After configuring Service Catalog and Apache Software Load Balancer for single sign-on (as per Chapter 3 of the Implementation Guide), you may receive the following Windows Security pop-up window requesting username and password when accessing the load balancer URL ( http://<hostname>:89/usm):
<Please see attached file for image>
After providing appropriate domain credentials you are correctly logged into Service Catalog.
Solution:
As per page 90 of the Implementation Guide the following section has been appended to <APACHE_Home>\conf\httpd.conf:
LoadModule sspi_auth_module modules/mod_auth_sspi.so <Location ~ "/usm/(wpf|documents|FileStore)">AuthName "domain_name" AuthType SSPI SSPIAuth On SSPIOfferBasic On SSPIAuthoritative On SSPIDomain "domain_name" SSPIofferSSPI off require valid-user </Location>
Change the 'SSPIofferSSPI' attribute to 'On' as follows:
LoadModule sspi_auth_module modules/mod_auth_sspi.so <Location ~ "/usm/(wpf|documents|FileStore)"> AuthName "domain_name" AuthType SSPI SSPIAuth On SSPIOfferBasic On SSPIAuthoritative On SSPIDomain "domain_name" SSPIofferSSPI On require valid-user </Location>
Once this change has been made, recycle the Apache2 service from either services.msc or the Apache Monitor.