Thursday, July 21, 2011

SAP Central Management Console and Windows AD Authentication

When changing Domain Controllers for a UMS/CMS server you need to modify the krb5.ini file. In our case that file was located in C:\WinNT. Simply adding another kdc line, saving the file and restarting TomCat updates the system.

AD.ourdomain.COM = {
kdc = NewDCName.AD.
ourdomain.COM
kdc = OldDCName.AD.
ourdomain.COM
default_domain = AD.
ourdomain.COM
}

Prior to this update, I was receiving this error:


Account Information Not Recognized: Active Directory Authentication
failed to log you on. Please contact your system administrator to make
sure you are a member of a valid mapped group and try again. If you are
not a member of the default domain, enter your user name as
UserName@DNS_DomainName, and then try again. (FWM 00006)

No comments: