SSO issues on webconsole

Hi Benjis,

Have you used the LDAP Tool and you can connect and bind?

Or do you also get an error?

Best Regards,

Seb

Hi @Seb 

Yes, I’ve checked on ldp also. I can connect both on 389 and 636 ports. Bind also. 

 

Hi @Benjis 

I believe the Web Console itself needs to be in the same domain, or at least needs the ability to bind to the AD domain specified.

Have you tried running those LDP queries or connection attempts while logged on to Web Console server as a windows user?

Thanks,

Stuart

Hi @Stuart Painter 

Both commcells and web console are on same domain.. I use the same account to connect to commcells hosts/ java gui and to web console host. :?

Hi @Benjis 

Can you check Webserver.log and put the snippets here?

Best Regards,

Seb

Hi @Seb 

Are you looking into something particular in the log and want me to look for? 

Hi @Benjis 

Any errors just before or same that Date/Time below:

Hi @Seb 

There were no errors that I’ve seen just before the mentioned AD errors. I have taken a snippet here:

1. Blue section is where I initially open the url and it should log me in automatically using SSO without asking credentials - but it does not happen (it asks creds, refer to screenshot in 1st post).
2. Red section is that user which is being failed to log into using SSO. I am logged with that user directly in OS and launching console in browser - it should allow SSO log in for that user. 
    

   

    

HI @Benjis 

Which SP/HPK or FR/MR is this please?

Is the Web Server on the Commserve?

Have you tried to restart the Web Server?

Hi @Seb 

This is on V11SP20 HPK 55.

Web Server is not on Commserve. Web server is on the same host as the web console.
Web Server was restarted, all combos checked. CV and IIS service restart, whole server restart.

HI @Benjis,

I see "invalid token type to retrive sessionGuid" in your log, not sure 100% sure that’s the issue.

You can try to uninstall all the Web Server/Web Console and reinstall them on the Commserve.

Otherwise, just log a case with Commvault and they will check.

Best Regards,

Seb

Hi @Seb 

Having webserver/web console on commserve is not an option :) Thanks for trying to help out!

HI @Benjis,

Now I am confused, you already have a case 

I am sure he will be able to help you.

Best Regards,

Seb

@Benjis , can you share the case number so I can track accordingly?

@Benjis , I was able to find the case number 210907-423.

Looks like they resolved it for you (sharing the solution).

Feel free to share the case number going forward right in the first post.  The Support staff have access to the case notes and can perhaps find a solution faster rather than start from scratch    The faster we can help you, the better!

Resolution from case:

On WebEx session, we looked at the issue where one of his Commserve servers cannot access the metrics server via the web and SSO.

The main Commserve can access the metrics server via SSO but the child Commserve prompts for a login and SSO is not working.

Login window was from Internet Explorer and we were able to get the login to work by adjusting the security levels in IE.

Will do!