Setting Up Windows Desktop SSO Authentication In addition to configuring the Windows Desktop SSO authentication module using the OpenSSO Enterprise console, a user must be created in the Windows 2000 Domain Controller and Internet Explorer must be configured. • • • To Create a User in the Windows Domain Controller • In the domain controller, create a user account for the OpenSSO Enterprise authentication module.

If the user is found but ktpass fails to create the keytab, there may be problems with the domain controller setup. Run the netdiag command (also part of the Windows.

• From the Start menu, go to Programs>Administration Tools. • Select Active Directory Users and Computers. • Go to Computers >New >computer and add the client computer's name. If you are using Windows XP, this step is performed automatically during the domain controller account configuration. • Go to Users >New >Users and create a new user with the OpenSSO Enterprise host name as the User ID (login name). The OpenSSO Enterprise host name should not include the domain name.

• Associate the user account with a service provider name. • Install the ktpass utilities to the c: program files support tools directory. The ktpass utilities are not installed as part of the Windows 2000 server. You must install it from the installation CD. • Export the keytab files to the system in which OpenSSO Enterprise is installed by running the following commands. Ktpass -princ host/ hostname.domainname@DCDOMAIN -pass password -mapuser userName-out hostname.host.keytab ktpass -princ HTTP/ hostname.domainname@DCDOMAIN -pass password -mapuser userName-out hostname.HTTP.keytab The ktpass command accepts the following parameters: hostname.

The host name (without the domain name) on which OpenSSO Enterprise runs. Dvla D1 Form Download Pdf. The OpenSSO Enterprise domain name. The domain name of the domain controller.

This may be different from the OpenSSO Enterprise domain name. The password of the user account. Make sure that password is correct, as ktpass does not verify passwords. The user account ID. This should be the same as hostname.

Note – Make sure that both keytab files are kept secure.