After configuring Service Catalog and Apache Software Load Balancer for single sign-on, I receive Windows Security pop-up window requesting username and password.

Document ID : KB000050457
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

After configuring Service Catalog and Apache Software Load Balancer for single sign-on (as per Chapter 3 of the Implementation Guide), you may receive the following Windows Security pop-up window requesting username and password when accessing the load balancer URL ( http://<hostname>:89/usm):

Figure 1

After providing appropriate domain credentials you are correctly logged into Service Catalog.

Solution:

As per page 90 of the Implementation Guide the following section has been appended to <APACHE_Home>\conf\httpd.conf:

LoadModule sspi_auth_module modules/mod_auth_sspi.so 
<Location ~ "/usm/(wpf|documents|FileStore)">AuthName "domain_name" 
AuthType SSPI 
SSPIAuth On 
SSPIOfferBasic On 
SSPIAuthoritative On 
SSPIDomain "domain_name" 
SSPIofferSSPI off 
require valid-user 
</Location>

Change the 'SSPIofferSSPI' attribute to 'On' as follows:

LoadModule sspi_auth_module modules/mod_auth_sspi.so 
<Location ~ "/usm/(wpf|documents|FileStore)"> 
AuthName "domain_name" 
AuthType SSPI 
SSPIAuth On 
SSPIOfferBasic On 
SSPIAuthoritative On 
SSPIDomain "domain_name" 
SSPIofferSSPI On
require valid-user 
</Location>

Once this change has been made, recycle the Apache2 service from either services.msc or the Apache Monitor.