|
|
|
|
|
|
| Author |
Message |
DM *nix forums beginner
Joined: 18 Jul 2006
Posts: 2
|
Posted: Thu Jul 20, 2006 1:27 pm Post subject:
Re: SAPGUI SSO for HP-UX 11.23
|
|
|
Markus Döhr wrote:
| Quote: | DM wrote:
SSO for SAPGUI using Kerberos
SAP has some great documentation on how to get SAPGUI to do SSO via
Kerberos. However, this documentation all deals with windows
application servers. Without purchasing a package, can I get this to
work with HP-UX 11.23?
Here is an example of the SAP windows centric documentation:
http://help.sap.com/saphelp_nw2004s/helpdata/en/44/0efeafb9920d1be10000000a114a6b/frameset.htm
What are you trying to achieve? Authenticate you users against NIS or
against your local users on the HP-UX box?
That solution is Windows centric, it uses a proprietary library built by
SAP only for Windows
quote
Kerberos Single Sign-On (SSO) is a secure method of logging on to the
SAP system that simplifies the logon procedure without reducing
security. It is suitable if you only use Windows >= 2000 in your system
landscape.
/quote
The application server will communicate with the ADS in order to find
out, if the user has an ADS ticket on his client machine.
I'm not aware of any product for HP-UX (or any other *nix) that is able
to do that.
|
Thanks for the reply. We have full SSO with Windows 2003 Kerberos on
our UNIX machines using Putty and Kerberos. Works great. HP-UX
supports full GSSAPI and Kerberos.
I am trying to let SAPGUI leverage this and avoid passwords. SAP says
it "should" work on HP-UX, Linux, Solaris, etc. However, I am looking
for someone that has done this.
For example OSS Note: 352295 discusses the following:
The SAP test tool "GSSTEST" is used to test interoperability and
functions of a third party gss-api library, and it is freely available
for download from our Web-Server (as source code), follow the first link
about BC-SNC certification above. This tool can be used to check
interoperability between SAP-SNC and a third-party library on any
particular platform.
In a note to OSS I sent SAP Said:
SAP does not generally support the use of Kerberos for SNC.
HP's implementation of Kerberos might work for SNC (as far as I know
there are customers who implemented such a solution), but SAP is
not able to help with that.
Cheers,
DM |
|
| Back to top |
|
 |
Markus Döhr *nix forums beginner
Joined: 30 Jan 2006
Posts: 17
|
Posted: Thu Jul 20, 2006 1:31 am Post subject:
Re: SAPGUI SSO for HP-UX 11.23
|
|
|
DM wrote:
What are you trying to achieve? Authenticate you users against NIS or
against your local users on the HP-UX box?
That solution is Windows centric, it uses a proprietary library built by
SAP only for Windows
<quote>
Kerberos Single Sign-On (SSO) is a secure method of logging on to the
SAP system that simplifies the logon procedure without reducing
security. It is suitable if you only use Windows >= 2000 in your system
landscape.
</quote>
The application server will communicate with the ADS in order to find
out, if the user has an ADS ticket on his client machine.
I'm not aware of any product for HP-UX (or any other *nix) that is able
to do that.
--
Markus |
|
| Back to top |
|
 |
DM *nix forums beginner
Joined: 18 Jul 2006
Posts: 2
|
Posted: Tue Jul 18, 2006 6:07 pm Post subject:
SAPGUI SSO for HP-UX 11.23
|
|
|
SSO for SAPGUI using Kerberos
SAP has some great documentation on how to get SAPGUI to do SSO via
Kerberos. However, this documentation all deals with windows
application servers. Without purchasing a package, can I get this to
work with HP-UX 11.23?
Here is an example of the SAP windows centric documentation:
http://help.sap.com/saphelp_nw2004s/helpdata/en/44/0efeafb9920d1be10000000a114a6b/frameset.htm
Cheers,
DM |
|
| Back to top |
|
 |
Google
|
|
| Back to top |
|
 |
|
|
The time now is Sat Nov 22, 2008 12:22 am | All times are GMT
|
|
Property for sale in Spain | Reviews | Tax | Loans | Credit Cards UK
|
|
Copyright © 2004-2005 DeniX Solutions SRL
|
|
|
|
Other DeniX Solutions sites:
Unix/Linux blog |
electronics forum |
medicine forum |
science forum |
|
|
Privacy Policy
|
Powered by phpBB © 2001, 2005 phpBB Group
|
|