1742096 - Configure Kerberos AD SSO on JBOSS BI4 fails with various errors

• Error: Account Information Not Recognized: Active Directory Authentication failed to log you on. Please contact your system administrator to make sure you are a member of a valid mapped group and try again. If you are not a member of the default domain, enter your user name as UserName@DNS_DomainName, and then try again. (FWM 00006)
• Steps to enable vintela kerberos SSO fail on jboss application server 5.1
• We also saw the KRB5KRB_ERR_GENERIC (60) in the std.out with -Djcsi.kerberos.debug tracing enabled in the server and sometimes client packet scans
• SSO failed for jboss but worked with the same settings set for tomcat on the same server (verifying it was not a configuration issue
• There were many log4j initialization failed errors in the logs which normally do not mean anything (except with jboss)
• Client packet scans revealed that jboss was not giving a 401 (like successful tomcat) so no kerberos traffic or errors would usually appear.
• Manual java Active Directory logons worked fine on jboss

• SAP BusinessObjects Business Intelligence Platform 4.0 (although we suspect other versions would be affected as well)
• SAP BusinessObjects Business Intelligence Platform 4.0 SP04

zie bi4 4.x XI 3.1 ADAPT vintela 01649339 1649339 apache commons logging MANIFEST.MF com.businessobjects.apache.commons.jar , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , BI-BIP-DEP , Webapp Deployment, Networking, Vulnerabilities, Webservices , Bug Filed