MultiDomain SSO does not works with SafeSquid-SWG
Posted: Fri Feb 14, 2020 7:53 am
Hello All,
Recently I came across a Client's Problem,
Client Requirement Details:
--------------------------------------
Client Setup has 2 AD Servers and all the machines are connected to either of the domain.
They wanted SafeSquid-SWG to Support Kerberos Authentication so that the users are identified by their Logged in Crendetials rather than the user manually typing the password.
They wanted both their AD to b integrated into SafeSquid-SWG with Kerberos.
Problem Faced:
----------------------
SafeSquid Supports Kerberos Authentication but when 2 Domains are Integrated and Kerberos is enabled for both.
As per the Current Limitations the HTTP.keytab, because of which the second Domain's Kerberos Authentication Fails.
Recently I came across a Client's Problem,
Client Requirement Details:
--------------------------------------
Client Setup has 2 AD Servers and all the machines are connected to either of the domain.
They wanted SafeSquid-SWG to Support Kerberos Authentication so that the users are identified by their Logged in Crendetials rather than the user manually typing the password.
They wanted both their AD to b integrated into SafeSquid-SWG with Kerberos.
Problem Faced:
----------------------
SafeSquid Supports Kerberos Authentication but when 2 Domains are Integrated and Kerberos is enabled for both.
As per the Current Limitations the HTTP.keytab, because of which the second Domain's Kerberos Authentication Fails.