Using NTLM Authentication with CleverPath Portal
search cancel

Using NTLM Authentication with CleverPath Portal

book

Article ID: 56252

calendar_today

Updated On: 02-14-2018

Products

CleverPath Aion Development System CA BSO Distributed CA BSO Mainframe CA CTO Mainframe CleverPath Advanced Collaboration Option CleverPath Predictive Analysis Server CleverPath Portal CA Workload Automation AE - Business Agents (AutoSys) CA Workload Automation AE - Scheduler (AutoSys) Workload Automation Agent

Issue/Introduction

Summary:

This technical document covers the requirements, installation, configuration and possible issues associated with using NTLM Authentication CleverPath Portal. Please use the most current NTLM files. If you are using Portal 4.51, these files are available on the Portal CD in the \resources directory in the file named windows_authentication.zip. Users on 4.0, 4.01, and 4.5 should us the windows_authentication.zip located at: https://ftp.broadcom.com/user/downloads/pub/portal/4.51/4.51.001/resources/

I. Included Files

  1. Portal Files

    1. Portallogin.asp - This is the main file that is used for access to the Portal via NTLM Authentication.
    2. Portallogin.html - This is the alternative portal login page when NTLM Authentication fails.
    3. Logout.html - This is the portal logout page when using NTLM Authentication.

  • Third-Party files

    1. Msxml3.dll - This is the Microsoft XML Parser version 3.0 w/sp1.
    2. Scr55en.exe - This is the Windows Scripting Engine 5.5 used by Windows NT. This file is not required for Windows 2000 or 2003 as it is part of the operating system installation.

    • II. Required Software

    1. Windows 2000/2003 Server

      1. Internet Explorer 5.01 or higher
        http://www.microsoft.com/ie
      2. Microsoft XML Parser 3.0 or higher
        http://www.microsoft.com/downloads
      3. Microsoft Internet Information Server 5.0 - This is required because NTLM is a Microsoft authentication method and IIS is the program that actually passes the NTLM data to the Win2000/NT server.

  • Windows NT 4.0 Server

    1. Install the Windows NT Option Pack on the same machine as the Portal.
      http://www.microsoft.com/NTServer/nts/downloads/recommended/NT40ptPk/default.asp
    2. Install Windows Scripting Engine 5.5
      http://www.microsoft.com/msdownload/vbscript/scripting.asp
    3. Install Internet Explorer 5.01 or higher
      http://www.microsoft.com/ie
    4. Install Microsoft XML Parser 3.0 or higher
      http://www.microsoft.com/downloads
    5. Microsoft Internet Information Server 4.0 - This is required because NTLM is a Microsoft authentication method and IIS is the program that actually passes the NTLM data to the Win2000/NT server.

    • III. Installation Procedure

    1. Windows 2000/2003 Server

      1. Install the Microsoft XML Parser 3.0 or higher
      2. Copy the portallogin.asp, portallogin.html and logout.html files to a directory on the server.
      3. Open the Internet Services Manager for Internet Information Server.
      4. Expand the IIS Server.
      5. Right click on the Default Web Site.
      6. Choose New, then Virtual Directory.
      7. Enter an alias name for the virtual directory.
      8. Browse to the directory where the files you copied in step 2 are located.
      9. Click OK to finish the creation of the virtual directory.
      10. Choose the virtual directory you just created and right click on it. Now choose properties.
      11. Change Execute Permissions to "Scripts and Exectuables".
      12. Click OK.
      13. Now, right click on the portallogin.asp file in the virtual directory and choose properties.
      14. Click on the File Security tab, and then choose Edit.
      15. Make sure that Integrated Windows Authentication is the only authentication method checked. Uncheck all others.
      16. If you are installing using IIS 6.0 (included in Windows 2003 by default) then you'll need to enable ASP in the Web Service Extensions section from within the IIS properties for your web site.
      17. Close Internet Services Manager.

  • Windows NT 4.0 Server

    1. Install the Microsoft XML Parser 3.0 or higher.
    2. Install the Microsoft Scripting Engine 5.5.
    3. Reboot the NT server after the installation is complete.
    4. Install the Windows NT 4.0 Option Pack if you have not already done so.
    5. Copy the portallogin.asp, portallogin.html and logout.html files to a directory on the server.
    6. Open the Internet Services Manager for Internet Information Server.
    7. Expand the IIS Server
    8. Right click on the Default Web Sites.
    9. Choose New, then Virtual Directory.
    10. Enter an alias name for the virtual directory.
    11. Browse to the directory where the files you copied in step 5 are located.
    12. Click OK to finish the creation of the virtual directory.
    13. Choose the virtual directory you just created and right click on it. Now choose properties.
    14. Change Execute Permissions to "Execute"
    15. Click OK
    16. Now, right click on the portallogin.asp file in the virtual directory and choose properties.
    17. Click on the File Security tab and then choose Edit.
    18. Make sure "Windows NT Challenge/Response" is the only authentication method checked. Uncheck all others.
    19. Close Internet Services Manager

    • IV. Basic Configuration

    1. Local.properties file

      1. Located in [Portal_Install_Dir]/properties/local.properties
      2. Modify the login.impl variable to reflect the example below:
        login.impl=com.ca.portal.base.util.NTLMLogin
      3. Add the login.href variable:
        login.href=http://[IIS Server Name]/[Virtual Directory]/portallogin.asp
      4. Add the logout.href variable:
        logout.href=http://[IIS Server Name]/[Virtual Directory]/logout.html

  • Edit the portallogin.asp file. Please view the file in a text editor for details

    1. Make sure that the admin password that is defined in this file is correct. By default the admin password is admin, and this is what is used as an example in this file. If the admin password has been changed, make sure that it is reflected correctly in the portallogin.asp file.

    2. Under the commented out heading ''Native Login UI URL when not using NT authentication" please change the NativeLoginURL to the actual name of your IIS server.

      NativeLoginURL = http://[IIS Server Name]/portal/portallogin.html

    3. pecify your domain for Domain = array("")
      Ex. Domain = array("DOMAIN1","DOMAIN2","DOMAIN3")

  • Edit the portallogin.html file

    1. Modify the [portalserver_name] variable to point to the running Portal server. Example:
      http://[portalserver_name]:8080/servlet/portal

  • Edit the logout.html file

    1. Modify the [portalserver_name] variable to point to the running Portal server. Example:
      http://[portalserver_name]:8080/servlet/portal

    • V. Advanced Configuration

    1. Adding Multiple Domains to Authenticate Against

      1. Edit the Domain variable in the portallogin.asp file. Example: Domain="abc|xyz|aaa
      2. The domains you add have to either be trusted or you have to change the file permissions on the portallogin.asp file to include the "Authenticated Users" group from each domain you want to authenticate against. Again, this is not necessary if the domains trust each other.

  • Using NTLM and LDAP Simultaneously

    1. In order to use LDAP and NTLM together, you must make the following changes to the portallogin.asp file:
      1. Build User = False
      2. RemoveDomain = True
      3. Password = Your LDAP Server Password (This is normally ?LDAP# - where # is the number of your LDAP server.)

Environment

Release: CVPPOR56400-4.51-Portal
Component:
Powered by Wolken Software