HI,
I have a cluster environment with full SSO Implementation with KERBEROS.
I noticed that the dv/va isn't working with full sso, so I tried to implement the 2213938.1 document and i have 2 issues:
1) after disabling LWSSO the analytics requires username and password . the full KERBEROS SSO was some how disabled.
2) the document 2213938.1 is not detailed at all . i tried to figure out how to add the token based SSO and this is what I've done :
a) I opened the bitech-analysis-application.ear
b) there are 2 wars inside so i figured its the bitech-analysis-webapp.war and not the bitech-analysis-legacy-webapp.war because its more similar to analytics.ear
c) after opening the bitech-analysis-webapp.war i opened WEB-INF
d) I edited the weblogic.xml as follows :i commented the <security-role-assignment> that was there by default and added the <security-role-assignment> that I originally added to the analytics.ear so the weblogic.xml of both analytics.ear and bitech-analysis-application.ear are the same as follows:
<security-role-assignment>
<role-name>SSORole</role-name>
<principal-name>SSOUsers</principal-name>
<principal-name>MySSOGroup</principal-name>
</security-role-assignment>
<!-- THE DEFAULT
<security-role-assignment>
<role-name>valid-users</role-name>
<principal-name>users</principal-name>
</security-role-assignment>
-->
e) I edited the web.xml as follows :
<login-config>
<auth-method>CLIENT-CERT</auth-method>
</login-config>
<security-role>
<role-name>SSORole</role-name>
</security-role>
<!-- THE DEFAULT
<login-config>
<auth-method>CLIENT-CERT</auth-method>
</login-config>
<security-role>
<role-name>valid-users>
</security-role>
-->
I hope i did as expected, if not i would like to know please.
as i mentioned, both the analytics and dv requires username and password to login after the configuration.