• Group permissions
• Authentication mechanisms
  
  • List of users mechanism
  • LDAP query mechanism
  • SPNEGO (Single-Sign-On) mechanism
    
    • SPNEGO Troubleshooting
    
    
  
  

SPNEGO Troubleshooting

• Error Java Cryptography Extension (JCE) Unlimited Strength is not enabled.

  LDAP/Active Directory (AD) server may send tickets that have been encrypted using AES 256 bits (or larger) which is not enabled in Java (JRE) by default and therefore SPNEGO authentication may fail

  Java Cryptography Extension (JCE) Unlimited Strength includes two jar files that contain only configuration settings enabling unlimited strength cryptography algorithms in Java.

  To enable JCE unlimited strength download it from http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html

  The downloaded file contains three files
  

  • local_policy.jar
  • US_export_policy.jar
  • README.txt
  
  Read and follow the instructions outlined in the README.txt file.

  To install JCE unlimited strength, the client needs to put these two jars in
  - {OMNISCOPE LOCATION}\x86\lib\security
  - {OMNISCOPE LOCATION}\x64\lib\security
  while creating a backup for the existing (default) two files and restart the application