SSO issue after Service account password reset

CHETHAN RAO on February 17, 2021

Hi,

We have configured Kerberos for SSO in ARIS v9.8SR8 and recently had to reset the password for the Service account.

Now in-order for the SSO to start working again i see in the Installation document provided by SAG that KeyTab needs to be re-uploaded.

When checked in Installation folder I see there are 6 location where the Ktab.exe is present and I ran the command using one of the exe file as provided in the document and then re-uploaded it in the UMC admin, but it seems to have no effect and I am still not able to login automatically without providing the User ID and password.

Can you please help me what steps am I missing that it is not working. I dont see any error message while running the command or when re-uploading. Is there any other settings which needs to be performed?

Below are the commands present in the document and provided while creating

ktab -a <TECHUSER_USER_PRINCIPAL_NAME> -n 0 -append -k umc.keytab

Principal : _aris-np

Command Used : ktab -a _aris-np -n 0 -append -k umc.keytab

Password was provided when prompted

Done!. Service key is saved in umc.keytab

is the success message appeared.

The umc.keytab was later re-uploaded in UMC Admin and was successfully uploaded.

Is there any other steps which i missed or not done properly?

Thanks and Regards,

Chethan Rao

Attachments

Ktab creation.png

Tags: #aris

Notify Moderator

Best Reply

André Vitor Oliveira on February 19, 2021

Hi,

Usually I got some customers which uses the server name and which is the reason why I said that.
Please check these log files:

work_copernicus_X/base/logs/copernicus.portal.server.log
work_copernicus_X/base/logs/system.out.log
work_umcadmin_m/base/logs/system.out.log

To create a keytab syntax looks the same of yours ..:

ktab -a userPrincipalName@REALM password -n 0 -append -k umc.keytab

BR
AO

or register to reply.

Show in context Notify Moderator

6 Replies

Runé Becker on February 17, 2021

Dear Chethan,

I would guess that via a support ticket you might get a more specific response than some generic advices which the community members here could provide, not knowing your specific environment.

To issue a support ticket please go to https://empower.softwareag.com.

Does this help?

Cheers
Rune

Like

Sign in
or register to reply.

Notify Moderator
André Vitor Oliveira on February 18, 2021

HI

Usually the Principal is the same name of the ARIS server .. you set the : _aris-np, does this your hostname for ARIS ? ..e.g. http://_aris-np/umc .. ?.. You also could check the log file system.out from the folder umcadmin_x\log for more details.

BR
AO

Like

Sign in
or register to reply.

Notify Moderator
CR

CHETHAN RAO on February 19, 2021 as Reply to André Vitor Oliveira

Hi,

Principal used here is the Service Account Name and not the hostname. I tried searching the log files but i dont see any error message related to this.

Regards,

Chethan Rao

Like

Sign in
or register to reply.

Notify Moderator
CR

CHETHAN RAO on February 19, 2021 as Reply to Runé Becker

HI,

Unfortunately we dont have the contract for support and hence raising a support ticket is not an option for now and also the version used is 9 and I dont think they provide support for this version.

Regards,

Chethan Rao.

Like

Sign in
or register to reply.

Notify Moderator
André Vitor Oliveira on February 19, 2021

Best reply

Hi,

Usually I got some customers which uses the server name and which is the reason why I said that.
Please check these log files:

work_copernicus_X/base/logs/copernicus.portal.server.log
work_copernicus_X/base/logs/system.out.log
work_umcadmin_m/base/logs/system.out.log

To create a keytab syntax looks the same of yours ..:

ktab -a userPrincipalName@REALM password -n 0 -append -k umc.keytab

BR
AO

Like

Sign in
or register to reply.

Notify Moderator
CR

CHETHAN RAO on February 21, 2021

Hi,

Thanks for the solution.

I gave the below command and uploaded the same and it is working now.

ktab -a userPrincipalName@REALM -n 0 -append -k umc.keytab

Thanks and Regads,

Chethan Rao.

Like

Sign in
or register to reply.

Notify Moderator

SSO issue after Service account password reset

Best Reply

6 Replies

Arbeitsgruppe Modellierungskonventionen der ARIS User Group DACH

Master Operational Excellence in 2025: Insights You Won’t Want to Miss!