Information Technology Reference
In-Depth Information
How to do it…
Setting up the Windows domain SSO is not a simple task as it involves many aspects of
your network configuration. It is highly recommended that you engage the product vendor
to ensure smooth implementation.
Proceed with the following steps to set up the Windows domain SSO:
1. Shut down JIRA if it is running.
2. Copy
login.conf
,
krb5.conf
, and
spnego-exclusion.properties
to the
<JIRA_INSTALL>/atlassian-jira/WEB-INF/classes
direct-
ory.
3. Copy
appfusions-jira-seraph-4.0.0.jar
and
appfusions-
spnego-r7_3.jar
to the
<JIRA_INSTALL>/atlassian-jira/WEB-
INF/lib
directory.
4. Open the
web.xml
file located in the
<JIRA_INSTALL>/atlassian-
jira/WEB-INF
directory in a text editor.
5. Add the following XML snippet before the
THIS MUST BE THE LAST
FILTER IN THE DEFINED CHAIN
entry. Make sure you update the values
for the following parameters:
◦ For
spnego.krb5.conf
, use the full path to the
spne-
go.krb5.conf
file
◦ For
spnego.login.conf
, use the full path to the
spne-
go.login.conf
file
◦ For
spnego.preauth.username
, use the username of the service ac-
count
◦ For
spnego.preauth.password
, use the password of the service ac-
count
<filter>
<filter-name>SpnegoHttpFilter</filter-name>
<filter-class>net.sourceforge.spnego.SpnegoHttpFilter</filter-class>
<init-param>
<param-name>spnego.allow.basic</param-name>
<param-value>true</param-value>
</init-param>
<init-param>
