http://www.ilient.com/Sysforums/posts/list/57.page JForum - http://www.jforum.net http://www.ilient.com/Sysforums/posts/preList/6464/27535.page http://www.ilient.com/Sysforums/posts/preList/6464/27535.page GMT
i have opaned for you a service request #363564 please reoly to it ASAP.

Thanks Inna. ]]> http://www.ilient.com/Sysforums/posts/preList/6464/27538.page http://www.ilient.com/Sysforums/posts/preList/6464/27538.page GMT I took a backup of DB and Sysaid folders. Can I simply restore and revert back to 7.0.05]]> http://www.ilient.com/Sysforums/posts/preList/6464/27563.page http://www.ilient.com/Sysforums/posts/preList/6464/27563.page GMT
To configure single sign-on using the built-in Tomcat web-server, please edit the serverConf.xml file located at ...\SysAidServer\root\WEB-INF\conf. Add the following lines after the line <externalLoginClass>none</externalLoginClass>:
<ntlmAuth>
<ntlmParam>
<ntlmParamName>jcifs.smb.client.domain</ntlmParamName>
<ntlmParamValue>ACME</ntlmParamValue>
</ntlmParam>
<ntlmParam>
<ntlmParamName>jcifs.http.domainController</ntlmParamName>
<ntlmParamValue>DC1.acme.com</ntlmParamValue>
</ntlmParam>
<ntlmParam>
<ntlmParamName>jcifs.smb.client.username</ntlmParamName>
<ntlmParamValue>username_on_AD</ntlmParamValue>
</ntlmParam>
<ntlmParam>
<ntlmParamName>jcifs.smb.client.password</ntlmParamName>
<ntlmParamValue>password_of_the_above_username</ntlmParamValue>
</ntlmParam>
</ntlmAuth>

Make sure to replace:
1. ACME with the NetBIOS domain name (pre-Windows 2000)
2. DC1.acme.com with the hostname or IP address of your domain controller.
3. username_on_AD with a user-name on Active Directory (Any domain user should be fine; no administrative permissions are necessary. Make sure to set “password never expires” so that the integration will not break whenever the password expires.)
4. password_of_the_above_username with the password of the mentioned user account.

After saving these changes, please restart the SysAid Server service to apply the new integration.

If all of the above does not help, there is an additional change that has to be made in the Domain Controller Security Settings. Find Local Policies\Security Options and then set the Network Security -> LAN Manger Authentication Level to LM and NTLM responses. Other values may apply as well. This is the one that worked for us.

In addition, please follow these steps to resolve blank screen issues:

Please open …\SysAidServer\tomcat\conf\context.xml in a text editor, break a new line above </Context> and add the following:

<Manager className='org.apache.catalina.session.PersistentManager'
saveOnRestart='false'
maxActiveSessions='-1'
maxIdleSwap='-1'
maxIdleBackup='-1'>
<Store className='org.apache.catalina.session.FileStore'/>
</Manager>

Save the file and stop the SysAid Server service. Delete the …\SysAidServer\tomcat\work\Catalina\localhost\_\SESSIONS.set file and then start SysAid Server again.

Please make sure that this folder is stays empty, in case it's not, please stop the service again delete all the SESSIONS.set files and only then start the service.


*********For SysAid v7 and under*********

Once LDAP integration has been configured to import user accounts from your Active Directory domain, you can configure single sign-on to automatically authenticate users using the NTLM protocol according to the credentials they used to login to the domain.

To configure single sign-on using the built-in Tomcat web-server, please edit the serverConf.xml file located at ...\SysAidServer\root\WEB-INF\conf. Add the following lines after the line <externalLoginClass>none</externalLoginClass>:
<ntlmAuth>
<ntlmParam>
<ntlmParamName>jcifs.smb.client.domain</ntlmParamName>
<ntlmParamValue>ACME</ntlmParamValue>
</ntlmParam>
<ntlmParam>
<ntlmParamName>jcifs.http.domainController</ntlmParamName>
<ntlmParamValue>DC1.acme.com</ntlmParamValue>
</ntlmParam>
<ntlmParam>
<ntlmParamName>jcifs.smb.client.username</ntlmParamName>
<ntlmParamValue>username_on_AD</ntlmParamValue>
</ntlmParam>
<ntlmParam>
<ntlmParamName>jcifs.smb.client.password</ntlmParamName>
<ntlmParamValue>password_of_the_above_username</ntlmParamValue>
</ntlmParam>
<ntlmParam>
<ntlmParamName>jcifs.smb.lmCompatibility</ntlmParamName>
<ntlmParamValue>3</ntlmParamValue>
</ntlmParam>
</ntlmAuth>

Make sure to replace:
1. ACME with the NetBIOS domain name (pre-Windows 2000)
2. DC1.acme.com with the hostname or IP address of your domain controller.
3. username_on_AD with a user-name on Active Directory (Any domain user should be fine; no administrative permissions are necessary. Make sure to set “password never expires” so that the integration will not break whenever the password expires.)
4. password_of_the_above_username with the password of the mentioned user account.

After saving these changes, please restart the SysAid Server service to apply the new integration.

If all of the above does not help, there is an additional change that has to be made in the Domain Controller Security Settings. Find Local Policies\Security Options and then set the Network Security -> LAN Manger Authentication Level to LM and NTLM responses. Other values may apply as well. This is the one that worked for us.

In addition, please follow these steps to resolve blank screen issues:

Please open …\SysAidServer\tomcat\conf\context.xml in a text editor, break a new line above </Context> and add the following:

<Manager className='org.apache.catalina.session.PersistentManager'
saveOnRestart='false'
maxActiveSessions='-1'
maxIdleSwap='-1'
maxIdleBackup='-1'>
<Store className='org.apache.catalina.session.FileStore'/>
</Manager>

Save the file and stop the SysAid Server service. Delete the …\SysAidServer\tomcat\work\Catalina\localhost\_\SESSIONS.set file and then start SysAid Server again.

Please make sure that this folder is stays empty, in case it's not, please stop the service again delete all the SESSIONS.set files and only then start the service.]]> http://www.ilient.com/Sysforums/posts/preList/6464/27600.page http://www.ilient.com/Sysforums/posts/preList/6464/27600.page GMT http://www.ilient.com/Sysforums/posts/preList/6464/32822.page http://www.ilient.com/Sysforums/posts/preList/6464/32822.page GMT