TSO and SRC 1.4 (482 Views)
Reply
Esteemed Contributor
Leon_Van_Dongen
Posts: 278
Registered: ‎09-30-2008
Message 1 of 7 (482 Views)

TSO and SRC 1.4

Hello

 

I'm having a massive problem trying to get this to work, and any assistance would be greatly appreciated. 

 

In my test instance, I have SM Server installed on one server, and the web client, src and windows client installed on another server.  I'm using SM 9.32.  I'm using Tomcat 7 and Apache 2.2

 

I've created certificates and have managed to get TSO working from the windows client correctly.  I can't get it working in the web or SRC client.  I'm more interested at the moment in getting it working in SRC.  As the SRC and Client are on the same PC, I'm using the same certificates cacert and .keystore

 

I have done the following:

 

SM.cfg

 

sm -loadBalancer -httpPort:13080 -sslConnector:0

sm -httpPort:13081 -JVMOption0:-Xms128m -JVMOption1:-Xmx256m -JVMOption2:-Xr -sslConnector:1 -httpsPort:13443 -ssl:1

 

 

 

sm.ini

#ssl
trustedsignon:1
keystoreFile:server.keystore
keystorePass:pass

truststoreFile:cacerts
truststorePass:changeit
ssl_trustedClientsJKS:trustedclients.keystore
ssl_trustedClientsPwd:pass
ssl_reqClientAuth:2  

 

applicationContext.properties

sm.protocol=https

sm.port=13443

src.security.ssoEnabled=true

src.security.mode=tso

 

src.security.secureLogin=true
src.security.sslPort=8443

src.trustStore=D:\\HP\\cacerts
src.trustStorePassword=changeit
src.keyStore=d:\\HP\\client.local.keystore
src.keyStorePassword=password

 

In tomcat I've added:

<Connector port="8001" protocol="AJP/1.3" redirectPort="8443" tomcatAuthentication="false" />

 

I'm using Apache in front of tomcat.

 

So I start up the SRC and in the logs it connects to SM and rebuilds the catalog perfectly.

 

I connect to the address: http://server/portal and my log file for tomcat is:

INFO [ajp-bio-8001-exec-1] (PreAuthenticationFilter.java:189) - SSO: user <myusername> was successfully pre-authenticated

 

It authenticates fine, because if I remove my user from the operator table, it fails here.  SM.log shows that it's authenticated, but the website just says 'Page cannot be displayed'.  If I don't run SSO and just normal authentication, the SRC loads up fine and I can login ok.

 

Anyone got any ideas why it would authenticate, but not show anything?

 

 

 

 

Advisor
Mathavan
Posts: 33
Registered: ‎12-17-2009
Message 2 of 7 (347 Views)

Re: TSO and SRC 1.4

Hello
Did you find a reason for this issue? I have followed the same steps and I am getting the same error

 

How did you fix the issue?

Regular Advisor
WW205043
Posts: 100
Registered: ‎07-07-2009
Message 3 of 7 (306 Views)

Re: TSO and SRC 1.4

Hi Leon_Van_Dongen,

Can you please help me ,Iam also facing the same issue .

Regards,
Shameer
Esteemed Contributor
Leon_Van_Dongen
Posts: 278
Registered: ‎09-30-2008
Message 4 of 7 (292 Views)

Re: TSO and SRC 1.4

Hi

 

I did get it sorted.  Some points to note below. 

 

src.security.secureLogin=true needs to be set to false if you aren't accessing the SRC/Web client via https.

 

For the SRC servlets, I have them setup as:

sm -httpPort:13220 -debugnode -JVMOption0:-Xms128m -JVMOption1:-Xmx256m -JVMOption2:-Xr -sslConnector:1 -httpsPort:13221 -ssl:1 -ssl_reqClientAuth:2 -trustedsignon:1

 

 

And my sm.ini

 

#SSL Servlet parameters
keystoreFile:server.keystore
keystorePass:<password>

ssl_trustedClientsJKS:trustedclients.keystore
ssl_trustedClientsPwd:<password>
truststoreFile:cacerts
truststorePass:changeit
sslConnector:0

 

Try those settings.  Some may not be needed, as I'm running a vertical load balanced SM system, with web, thick clients and SRC.

 

Regular Advisor
WW205043
Posts: 100
Registered: ‎07-07-2009
Message 5 of 7 (280 Views)

Re: TSO and SRC 1.4

Thanks for the answer Leon ,I will try this .

 

Regards,

Shameer

Regular Advisor
WW205043
Posts: 100
Registered: ‎07-07-2009
Message 6 of 7 (271 Views)

Re: TSO and SRC 1.4

Hi Leon,

 

It worked for me ,I have set  this src.security.secureLogin as false and after that  it started to work .

 

Many thanks for your help.

 

Regarads,

Shameer

Esteemed Contributor
Leon_Van_Dongen
Posts: 278
Registered: ‎09-30-2008
Message 7 of 7 (262 Views)

Re: TSO and SRC 1.4

Glad you got it working :)

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.