sgd an active directory
I am having problem trying to get active directory login working right. This is a test server on private network an this is the error I am getting.
Authentication failed using the supplied username and password. Failed with error javax.naming.AuthenticationException: Failed to authenticate Cannot get kdc for realm .domainname.
Impact: The login authority will be unable to authenticate users.
Resolution: Type the username and password of a user with sufficient privileges. For LDAP servers, use an LDAP-style username, for example cn=Bill Orange,cn=Users,dc=indigo-insurance,dc=com. For the Active Directory login authority, use a user principal name, for example billorange@indigo-insurance.com.
this person is an administrator
# 1
Active Directory Login Authority can be tricky. Start by configuring LDAP LA to make sure that you have basic connectivity to the AD server working. Once you have LDAP LA working then move to AD LA.
Have you configured your system per
http://docs.sun.com/source/819-4309-10/en-us/base/standard/activedir_auth_enabl ing.html
the krb5 file is case sensitive, Kerberos requires time sync between SSGD and AD LA server and proper name resolution (DNS) is a must. Start with a basic krb5 file (follow the example in the URL explicitly (CAPS where CAPS show, dot "." references where needed and make sure the you use the right KDC). You will want to use kinit, ldapsearch and nslookup -query commands to test your configuration.
# 2
Hi,From my experience, follow the Carmelo advice!!, Share the same NTP server for AD and SGD servers, is the best way to avoid problems, of course name resolution it's a must.
