KB - Verify the back-side Kerberos SSO Setup

Affects product

  • Airlock Gateway

Question or problem

Verify the Kerberos configuration on Airlock Gateway, the Active Directory domain controller and the back-end server with the test program.

Procedure-related prerequisites

  • You need to be logged in as root on the Airlock Gateway console.

Example values

  • Kerberos Environment: int.virtinc.com-ch
  • Kerberos user: test1@int.virtinc.com
  • SPN: http/webapp.int.virtinc.com
  • Internal URL: https://webapp.int.virtinc.com

Instruction

Test execution and verification:

  1. Run the following commands:
  2.  
    Terminal box
    airlock-test-kerberos -v -e int.virtinc.com-ch test1@int.virtinc.com HTTP/webapp.int.virtinc.com https://webapp.int.virtinc.com
  3.  
    Notice

    If an error occurs, the test program stops.

  4. Verify the following:
    • When running airlock-test-kerberos with the internal URL, the HTTP response code is not 401.
    • The test program runs through without any problems.
  6. The verification steps from the above were successful.
 
Info

In case of failure, analyze the output of the test program and verify the settings on all involved systems.