VMware Workspace ONE Community
OSsamamcit
Contributor
Contributor

Enable SSO for IOS through WS1 Access

Dears,
When we enable KDC authentication on ISO SSO on WSI Acess under the authentication method we face the below error 

Failed to set adapter configuration: An exception occurred while updating the KDC data. Cause information: Checksum failed (Checksum failed (Checksum failed))

so do you know how to resolve this issue 

Thanks,

Reply
0 Kudos
8 Replies
OSsamamcit
Contributor
Contributor

The issue is resolved and it was the KDC service not configured properly on the access machines under load balancer and once we remove the configuration and reconfigure it again on node one and copy the configuration file to the other nodes its working fine

 

Thanks,

Reply
0 Kudos
anilspp
Enthusiast
Enthusiast

Thanks forvsharing learn some new thing.

Reply
0 Kudos
anilspp
Enthusiast
Enthusiast

Thanks for sharing resolution.

Reply
0 Kudos
AndrewHallAndre
Contributor
Contributor

How did you unconfigure it on the nodes?  I have the same issue but I can only reconfigure nodes with a new setting, not unconfigure it from the nodes so I can't import the configuration from the first node

Reply
0 Kudos
BigMike23
Enthusiast
Enthusiast

Thanks for sharing the resoiution

Reply
0 Kudos
OSsamamcit
Contributor
Contributor

i will reply ASAP

Reply
0 Kudos
OSsamamcit
Contributor
Contributor

i will reply from my other account

Reply
0 Kudos
OssamaMaksoud
Contributor
Contributor

you can use the below steps to configure KDC 

Steps for Configuring KDC after setting up cluster:

Initialize KDC on first node
        /etc/init.d/vmware-kdc init --realm REALM --subdomain $SUBDOMAIN
        -  When using load balancer with multiple nodes, REALM & SUBDOMAIN both should be load balancer name
        -  REALM name should be lb name in upper case and subdomain should be lb name in lower case
        E.g. /etc/init.d/vmware-kdc init --realm VIDM.HS.TRCINT.COM --subdomain vidm.hs.trcint.com
Restart Services on first node
    /etc/init.d/horizon-workspace restart
    /etc/init.d/vmware-kdc restart
Copy data from first node
    (Execute below command from folder on which horizon user has write permission)
    service vmware-kdc dump <dump-file>
Load KDC data on second node
    - copy dump file to second node
   
   - Modify file permission and make horizon user owner
      chown horizon <dump-file>
    - service vmware-kdc load <dump-file>
Restart Services on second node
    service horizon-workspace restart
    service vmware-kdc restart
AND TO RECONFIGURE THE NODE FROM SCRATCH JUST USE THE BELOW COMMAND


/etc/init.d/vmware-kdc init --realm VIDM.HS.TRCINT.COM --subdomain vidm.hs.trcint.com --force

 

LET ME KNOW IF YOU NEED FURTHER SUPPORT.

Reply
0 Kudos