KB - Verify the Back-side Kerberos SSO Setup

Affects product

  • Airlock Gateway

Question or problem

Verify the Kerberos configuration on Airlock Gateway, the Active Directory domain controller and the back-end server with the test program.

Procedure-related prerequisites

  • You need to be logged in as root on the Airlock Gateway console.

Example values

  • Kerberos Environment: int.virtinc.com-ch
  • Kerberos user: test1@int.virtinc.com
  • SPN: http/webapp.int.virtinc.com
  • Internal URL: https://webapp.int.virtinc.com

Instruction

  • Test execution and verification:
  • 1.
    Run the following commands:
  • copy
    airlock-test-kerberos -v -e int.virtinc.com-ch test1@int.virtinc.com HTTP/webapp.int.virtinc.comhttps://webapp.int.virtinc.com

    The test program stops in case of an errors occurs.

  • 2.
    Verify the following:
    • -
      When running airlock-test-kerberos with the internal URL, the HTTP response code is not 401.
    • -
      The test program runs through without any problems.
  • The verification steps from the above were successful.
  • In case of failure:
  • Analyze the output of the test program and verify the settings on all involved systems.