I'm setting up Kerberos SSO and I believe I almost have everything working. Webtop is displaying the Repositories selection page, but when I press the 'Login' button the same Repositores selection page is displayed. Therefore, I started looking at the log files but cannot find any error reported. According to the "Documentum Keberos SSO Authentifcation guide" at this point DFC should be sending a request for the repository ST, this I thought would generate some kerberos trace in Wireshark, but I see nothing (kerberos trace is generated for the webtop ST so I'm happy that is working). This to me means the KRB5.INI file isn't setup correctly. I have changed this file every way I can, without any difference to the result, and I'm starting to think that this file isn't being read at all. Should I beable to see any debug trace that proves this file is being read?
I have checked the java parameters for the tomcat service are correct, placed the krb5.ini in \windows (and \winnt), supplied a hard-coded path for the krb5.ini in the parameter, removed all blank lines and spaces at the end of each line etc....
I switched on DFC tracing and can see the following line, but nothing around it tell me why it has failed.
31.844 0.001 N/A [http-8080-1] com.documentum.fc.common.DfUtil.formatString("Failed to authenticate against repository {0} using Kerberos SSO.",null) ==> "Failed to authenticate against repository {0} using Kerberos SSO."Any thoughts?Alan
