Dears,
When we enable KDC authentication on ISO SSO on WSI Acess under the authentication method we face the below error
Failed to set adapter configuration: An exception occurred while updating the KDC data. Cause information: Checksum failed (Checksum failed (Checksum failed))
so do you know how to resolve this issue
Thanks,
The issue is resolved and it was the KDC service not configured properly on the access machines under load balancer and once we remove the configuration and reconfigure it again on node one and copy the configuration file to the other nodes its working fine
Thanks,
Thanks forvsharing learn some new thing.
Thanks for sharing resolution.
How did you unconfigure it on the nodes? I have the same issue but I can only reconfigure nodes with a new setting, not unconfigure it from the nodes so I can't import the configuration from the first node
Thanks for sharing the resoiution
i will reply ASAP
i will reply from my other account
you can use the below steps to configure KDC
Steps for Configuring KDC after setting up cluster:
Initialize KDC on first node
/etc/init.d/vmware-kdc init --realm REALM --subdomain $SUBDOMAIN
- When using load balancer with multiple nodes, REALM & SUBDOMAIN both should be load balancer name
- REALM name should be lb name in upper case and subdomain should be lb name in lower case
E.g. /etc/init.d/vmware-kdc init --realm VIDM.HS.TRCINT.COM --subdomain vidm.hs.trcint.com
Restart Services on first node
/etc/init.d/horizon-workspace restart
/etc/init.d/vmware-kdc restart
Copy data from first node
(Execute below command from folder on which horizon user has write permission)
service vmware-kdc dump <dump-file>
Load KDC data on second node
- copy dump file to second node
- Modify file permission and make horizon user owner
chown horizon <dump-file>
- service vmware-kdc load <dump-file>
Restart Services on second node
service horizon-workspace restart
service vmware-kdc restart
AND TO RECONFIGURE THE NODE FROM SCRATCH JUST USE THE BELOW COMMAND
/etc/init.d/vmware-kdc init --realm VIDM.HS.TRCINT.COM --subdomain vidm.hs.trcint.com --force
LET ME KNOW IF YOU NEED FURTHER SUPPORT.