We have configured Kerberos for SSO in ARIS v9.8SR8 and recently had to reset the password for the Service account.
Now in-order for the SSO to start working again i see in the Installation document provided by SAG that KeyTab needs to be re-uploaded.
When checked in Installation folder I see there are 6 location where the Ktab.exe is present and I ran the command using one of the exe file as provided in the document and then re-uploaded it in the UMC admin, but it seems to have no effect and I am still not able to login automatically without providing the User ID and password.
Can you please help me what steps am I missing that it is not working. I dont see any error message while running the command or when re-uploading. Is there any other settings which needs to be performed?
Below are the commands present in the document and provided while creating
ktab -a <TECHUSER_USER_PRINCIPAL_NAME> -n 0 -append -k umc.keytab
Principal : _aris-np
Command Used : ktab -a _aris-np -n 0 -append -k umc.keytab
Password was provided when prompted
Done!. Service key is saved in umc.keytab
is the success message appeared.
The umc.keytab was later re-uploaded in UMC Admin and was successfully uploaded.
Is there any other steps which i missed or not done properly?
I would guess that via a support ticket you might get a more specific response than some generic advices which the community members here could provide, not knowing your specific environment.
Unfortunately we dont have the contract for support and hence raising a support ticket is not an option for now and also the version used is 9 and I dont think they provide support for this version.
Usually the Principal is the same name of the ARIS server .. you set the : _aris-np, does this your hostname for ARIS ? ..e.g. http://_aris-np/umc .. ?.. You also could check the log file system.out from the folder umcadmin_x\log for more details.
Principal used here is the Service Account Name and not the hostname. I tried searching the log files but i dont see any error message related to this.
