Quantcast
Channel: VMware Communities: Message List
Viewing all articles
Browse latest Browse all 251495

Re: SSO Design Question

$
0
0

Cool.

 

I am able to fix some of the issue I was facing.

 

After installing SSO on both nodes.

(did not update the root-trust.jks)

 

1. I updated the STS endpoint..

and other endpoints were not getting updated.. with Return code : invalid credentials - 3

Updated the root-trust.jks file.

 

again tried to update..

and while updating other endpoint it started giving error Return code : Service Not Responding - 2

SCRN-CAP-0303.png

If you see the URL in above screenshot..in STS.Properties, I had "?wsdl" entry in the URL.

I tried updating STS service with new .properties file but no use..

I did changed in Database!! :-P

under RSA DB find table "LS_Service_EndPoint" this table contains the URL for all 3 endpoints..

Edited the URL for STS.. saved..

 

another changes I made was in LB.

the Mapping SHI*

KB says to map /ims to /ims on both nodes..

but I had to map /ims to /ims/STSService

and

/sso-adminserver to /sso-adminserver/sdk

SCRN-CAP-0305.png

Bingo!!!..

SCRN-CAP-0304.png

While performing these task, I kept Node 2 disconnected..

So that the LB does not forward traffic to node 2..

 

Now I need to make Node 2 (SSOB) online and had to figure out how to forward traffic for /sso-adminserver to /sso-adminserver/sdk on Node1 ONLY!.


Viewing all articles
Browse latest Browse all 251495

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>