More details

HCL Notes/Domino 8.5 Forum (includes Notes Traveler)

Subject:

More details

Hi,
Thank you for trying to help,

Here, more details :

I'm confident With my workstation client.
My site http://serveurlotus.la.fr is included in the intranet zone and I enabled windows authentification in the browser security options.

My workstation is registered in my directory.

I followed the troubleshooting guide,

When I type http://serveurlotus.la.fr/mail/rcour.nsf in my workstation browser, here is what the console says :

[0CE4:0011-0438] 24/04/2013 11:17:02,37 SSO API> *** Getting Single Sign-On Config Data (SECGetSSOConfigData) ***
[0CE4:0011-0438] 24/04/2013 11:17:02,37 SSO API> OrgName specified [la].
[0CE4:0011-0438] 24/04/2013 11:17:02,37 SSO API> ConfigName specified [LtpaTokenLa].
[0CE4:0011-0438] 24/04/2013 11:17:02,37 SSO API> Retrieved global static cache memory for config [la:LtpaTokenLa].
[0CE4:0011-0438] 24/04/2013 11:17:02,37 SSO API> *** Getting Single Sign-On Config Data (SECGetSSOConfigData) ***
[0CE4:0011-0438] 24/04/2013 11:17:02,37 SSO API> OrgName specified [la].
[0CE4:0011-0438] 24/04/2013 11:17:02,37 SSO API> ConfigName specified [LtpaTokenLa].
[0CE4:0011-0438] 24/04/2013 11:17:02,37 SSO API> Retrieved global static cache memory for config [la:LtpaTokenLa].
[0CE4:0011-0438] 24/04/2013 11:17:02,38 SPNEGO> Starting SPNEGO Negotiate - a properly configured HTTP client should send an Authorization: Negotiate header containing SPNEGO token when repeating the request /mail/rcour.nsf
[0CE4:0011-0438] 24/04/2013 11:17:02,38 SSO API> *** Getting Single Sign-On Config Data (SECGetSSOConfigData) ***
[0CE4:0011-0438] 24/04/2013 11:17:02,38 SSO API> OrgName specified [la].
[0CE4:0011-0438] 24/04/2013 11:17:02,38 SSO API> ConfigName specified [LtpaTokenLa].
[0CE4:0011-0438] 24/04/2013 11:17:02,38 SSO API> Retrieved global static cache memory for config [la:LtpaTokenLa].
[0CE4:0011-0438] 24/04/2013 11:17:02,38 SSO API> *** Getting Single Sign-On Config Data (SECGetSSOConfigData) ***
[0CE4:0011-0438] 24/04/2013 11:17:02,38 SSO API> OrgName specified [la].
......

And I'm prompted for login in.

when I type setspn -l serveurlotus (the name of my domino server), I guess the result expected is correct :

C:\Users\Administrateur>setspn -l serveurlotus
Noms ServicePrincipalName inscrits pour CN=SERVEURLOTUS,CN=Computers,DC=la,DC=fr
:
HOST/SERVEURLOTUS
HOST/serveurlotus.la.fr

now, with setspn -l domino (the domino user who launches domino server)
C:\Users\Administrateur>setspn -l domino
Noms ServicePrincipalName inscrits pour CN=domino,CN=Users,DC=la,DC=fr:
HTTP/serveurlotus.la.fr

I guess this is the result expected.

When I try a nslookup serveurlotus.la.fr I notice there is no CNAME mapped and serveurlotus.la.fr is the A name registered in the DNS.

What would you suggest to check ?

I don't know what to check more....
What I notice is that there is no kerberos ticket created in kerbtray.exe

Thank you in advance.

Feedback response number WEBB973DKN created by ~Arnold Chufoovitchakoi on 04/24/2013