IM

Hi All,

Environment: Aris version 10, release 24.

I followed ARIS document for Kerberos SSO

First LDAP connection is established and connection test is valid.

Under Kerberos, I used below values

KDC: FQDN of Active directory

realm: domain name

Principal: ADserviceaccount@domain

I created keytab using below command

ktab -a userPrincipalName@REALM -n 0 -append -k umc.keytab

It asked for password, then I entered password of AD technical user and uploaded key tab file in kerberos configuration screen. 

The configuration file is also uploaded from Add-on\Kereberos folder from Installation media.

 

Now I enabled Kerberos and tested but it did not work. In UMC log file (D:\Aris10.0.21\server\bin\work\work_umcadmin_l\base\logs)

It is giving warning: Encryption type RC4 with HMAC is not supported/enable

Any idea how to fix this ?

Thanks in advance

 

by Michael Schmitt
Posted on Tue, 06/11/2024 - 10:02

Hi,

 

RC4/HMAC Is no longer supported by java. you have to use AES128 or AES256 enryption which must be activated for the principal used.

 

Screenshot found via google:

Installation Guide for Integrated Windows Authentication for Apps using ...

1

Featured achievement

Rookie
Say hello to the ARIS Community! Personalize your community experience by following forums or tags, liking a post or uploading a profile picture.
Recent Unlocks

Leaderboard

|
icon-arrow-down icon-arrow-cerulean-left icon-arrow-cerulean-right icon-arrow-down icon-arrow-left icon-arrow-right icon-arrow icon-back icon-close icon-comments icon-correct-answer icon-tick icon-download icon-facebook icon-flag icon-google-plus icon-hamburger icon-in icon-info icon-instagram icon-login-true icon-login icon-mail-notification icon-mail icon-mortarboard icon-newsletter icon-notification icon-pinterest icon-plus icon-rss icon-search icon-share icon-shield icon-snapchat icon-star icon-tutorials icon-twitter icon-universities icon-videos icon-views icon-whatsapp icon-xing icon-youtube icon-jobs icon-heart icon-heart2 aris-express bpm-glossary help-intro help-design Process_Mining_Icon help-publishing help-administration help-dashboarding help-archive help-risk icon-knowledge icon-question icon-events icon-message icon-more icon-pencil forum-icon icon-lock