If you want to use desktop SSO and use a fallback to Forms based authentication when that fails, you need to make sure you have a few settings right: (Assuming you have all the desktop SSO configured properly.) Under the [server] stanza, set the order of the authentication mechanisms. auth-challenge-type = spnego, forms We need... Continue Reading →
Kerberos Ticket on Unix/Linux “Clock Skew too great”
Have been trying for 24hrs now to configure Desktop SSO for WebSEAL (TAMeb). After having no issues on my VM, doing it in the customers environment proved strangely difficult. After trying to run: /usr/krb5/bin/kinit user@DOMAIN.COM Even after fixing the time servers, I continued to get the message: Unable to obtain initial credentials. Status 0x96c73a25... Continue Reading →