IM SSO login issue for hosted domain.

When logging into im using SSO, I face some issue. I have applied T-patch T118786-20 and

T118789-22 for my JES2005Q4 IM.. Below is the scenario:

a) IM SSO login for default domain user.

If I log in as the default domain user (t1@tm.net.my), then I access IM, get the contact list prompted and able to login and logout successfully.

b) IM SSO login for hosted domain user

If i log in as the hosted domain user (t1@streamyx.com), I can acess IM as well, but it shows that the login identity is t1@tm.net.my which is not the expected result. The xmppd.log shows this:

18 Dec 2006 11:54:57,197] INFO xmppd [org.netbeans.lib.collab.util.Worker 1] Authenticating using Identity Server SSO

[18 Dec 2006 11:54:57,737] INFO xmppd [org.netbeans.lib.collab.util.Worker 3] User[t1@tm.net.my/nb-gracebeh] valid from: t1@tm.net.my/nb-gracebeh

[18 Dec 2006 11:54:57,995] INFO xmppd [org.netbeans.lib.collab.util.Worker 1] User[t1@tm.net.my/nb-gracebeh] valid from: t1@tm.net.my/nb-gracebeh

[18 Dec 2006 11:54:58,286] INFO xmppd [org.netbeans.lib.collab.util.Worker 3] User[t1@tm.net.my/nb-gracebeh] valid from: t1@tm.net.my/nb-gracebeh

[18 Dec 2006 11:54:58,340] INFO xmppd [org.netbeans.lib.collab.util.Worker 1] User[t1@tm.net.my/nb-gracebeh] valid from: t1@tm.net.my/nb-gracebeh

[18 Dec 2006 11:54:58,372] INFO xmppd [org.netbeans.lib.collab.util.Worker 3] User[t1@tm.net.my/nb-gracebeh] valid from: t1@tm.net.my/nb-gracebeh

[18 Dec 2006 11:54:58,403] INFO xmppd [org.netbeans.lib.collab.util.Worker 3] User[t1@tm.net.my/nb-gracebeh] valid from: t1@tm.net.my/nb-gracebeh

[18 Dec 2006 11:54:58,412] INFO xmppd [org.netbeans.lib.collab.util.Worker 3] User[t1@tm.net.my/nb-gracebeh] valid from: t1@tm.net.my/nb-gracebeh

[18 Dec 2006 11:54:58,777] INFO xmppd [org.netbeans.lib.collab.util.Worker 2] User[t1@tm.net.my/nb-gracebeh] valid from: t1@tm.net.my/nb-gracebeh

[18 Dec 2006 11:54:59,271] INFO xmppd [org.netbeans.lib.collab.util.Worker 1] User[t1@tm.net.my/nb-gracebeh] valid from: t1@tm.net.my/nb-gracebeh

[18 Dec 2006 11:54:59,404] INFO xmppd [org.netbeans.lib.collab.util.Worker 2] User[t1@tm.net.my/nb-gracebeh] valid from: t1@tm.net.my/nb-gracebeh

[18 Dec 2006 11:55:31,498] INFO xmppd [org.netbeans.lib.collab.util.Worker 0] [LDAPPool] saved uid=t1,ou=People,o=streamyx.com,o=isp

Please advice.

[2406 byte] By [jowynbeh@hello.coma] at [2007-11-26 13:08:17]
# 1

Easiest way to solve your problem is to use separate jnlp file for separate domains. & in the new jnlp file include the below argument tag

<argument>domain=whatever.com</argument>

Then login the hosted domain user with this new jnlp.

Let me know if you need more information.

Amit.Bakhrua at 2007-7-7 17:19:31 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 2
Is this a common problem when using one .jnlp files for multiple domains? Besides, if I insist using one .jnlp, is there any other alternate ways to solve this ?Thanks.
jowynbeh@hello.coma at 2007-7-7 17:19:31 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 3

If you use one jnlp file & does not pass the domain argument, then the client will pick the default domain from iim.conf file(server) thus you won't be able to access multiple domains.

And also there alternative way to solve your problem if you insist using one jnlp file, follow the below steps:

* cd /opt/SUNWiim/html/en/

#vi im.jnlp

Add the following in the im.jnlp just above the </resource> tag

<property name="com.iplanet.im.client.allowarobase" value="true" />

* Redeploy im resources into the web-container with recent changes

* Now launch the client from http://<hostname>:<webport>/im/en/im.jnlp

and then login as username@domain.com.

Hope this will solve your problem.

Amit.Bakhrua at 2007-7-7 17:19:31 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 4
"Redeploy im resources into the web-container with recent changes "How can I do it ?
azfara at 2007-7-7 17:19:31 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 5
# /opt/SUNWiim/sbin/iwadmin redeploy imor an alternate way is to directly edit the im.jnlp file in /opt/SUNWwbsvr/https-{hostname}/webapps/https-{hostname}/im/en/im.jnlp
Amit.Bakhrua at 2007-7-7 17:19:31 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 6
Thanks Amit,I tried both via command line and munualy but its not working with hosted domains however if i use seprate jnlp files for hosted domains then its working. Any idea where I am worng I want to use just one jnlp file.
azfara at 2007-7-7 17:19:31 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 7
Can you kindly mail me your im.jnlp file & iim.conf file at bakhru@sun.com?Also, enable the debug log & send me the xmppd.log.
Amit.Bakhrua at 2007-7-7 17:19:31 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...