Kerberos (SPNEGO)
Set up SPNEGO/Negotiate single sign-on for the iGrafx platform: create the service principal and keytab on the domain controller, configure the server, and configure each browser and the desktop client.
3 docs tagged with "kerberos"
View all tagsKerberos SSO "Request header is too large" exception with Tomcat Application server
Problem
Kerberos SSO stops working after updating to iGrafx Platform 18.x
After updating to version 18 or later, you may encounter issues with Kerberos SSO no longer working. In the igrafx\_server.log file, you will see a "negotiate header was invalid" error followed by an "Encryption type RC4 with HMAC is not supported/enabled" or similar error. The reason for this is that Java has dropped support for HMAC and 3DES encryption with release 11.0.17 - to fix the problem, you will need to enable AES128/AES256 encryption for Kerberos.