SSO Technical Information

image_pdfimage_print
Scaled or clustered environment (Windows only):

If you’ve scaled or clustered Jedox, there must be done some additional configurations before SSO will work.
The exchange of the kerberos tokens can be disturbed, though SPN trust issues. To solve this, use setspn.

Example scenario:
NetBiosName: jedox
Domain: jedox.test

FQDN1: Win1Jedox.jedox.test
FQDN2: Win2Jedox.jedox.test

Once everything is set on the network side (i.e., they can communicate with each other), you must adjust the setspn settings of the servers as follows:

Important: Login as a serviceuser that is available for both server (i.e. a Domain User).
Example: jedoxuser

Enter the following commands:
Important: Use the FQDN, or the communication won’t work properly!
setspn -A HTTP/win1jedox.jedox.test jedox\jedoxuser
setspn -A HTTP/win2jedox.jedox.test jedox\jedoxuser
Configure all services (on both server) to run under the service user jedox\jedoxuser.

Browser connection test:

It’s possible to test the connection through the browser. To do so, use the following URL:
http://<server>:<olap-port>/server/login

This returns a session ID.

image_pdfimage_print
Was this post helpful?
NoYes (-1 rating, 1 votes)
Loading...