Troubleshooting issue

[oliv...@gmail.com]

Hi guys,

I use waffle with spring security 4 on Tomcat to get SSO working.

Sadly, during authentication I'm prompted in every browser to enter credentials.

The things I did until now to troubleshoot:

1. The tomcat server is running on an account called "ssotomcat", who is in the domain and tomcat as running as a service

2. I set up a SPN with the command

setspn -A HTTP/SSO.dom.***.lan:8443 ssotomcat

3. Executing 

setspn -l ssotomcat

gives me

Registrierte Dienstprinzipalnamen (SPN) für CN=SSOTomcat,CN=Users,DC=dom,DC=***,DC=lan:

        HTTP/SSO.dom.***.lan:8443

4. I also checked Kerberos delegation in the LDAP and allowed delegation for the user and the machine

5. I tried the IE with recommended settings in the troubleshooting section, chrome and firefox with no success

6. I turned on Wireshark and tracked the traffic, which seems to be fine in my eyes (at least there is no error related to Kerberos, Wireshark capture is in attachments)

7. I ran ieHTTPHeaders and got

GET /webui/static/resources/fonts/font-awesome/fontawesome-webfont.woff?v=4.7.0 HTTP/1.1

Accept: */*

Referer: https://sso.dom.***.lan:8443/webui/login.html

Accept-Language: de-DE

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)

Origin: https://sso.dom.***.lan:8443

Accept-Encoding: gzip, deflate

Host: sso.dom.***.lan:8443

Connection: Keep-Alive

Cookie: JSESSIONID=70587AB932F49ADA1168C9DD368A4623

HTTP/1.1 401 Unauthorized

Server: Apache-Coyote/1.1

Connection: keep-alive

WWW-Authenticate: Negotiate

WWW-Authenticate: NTLM

Cache-Control: no-cache, no-store, max-age=0, must-revalidate

Pragma: no-cache

Expires: 0

Strict-Transport-Security: max-age=31536000 ; includeSubDomains

X-XSS-Protection: 1; mode=block

X-Frame-Options: DENY

X-Content-Type-Options: nosniff

Transfer-Encoding: chunked

Date: Mon, 18 Jun 2018 14:01:33 GMT

GET /sso/sso.html HTTP/1.1

Accept: image/gif, image/jpeg, image/pjpeg, application/x-ms-application, application/xaml+xml, application/x-ms-xbap, */*

Referer: https://sso.dom.***.lan:8443/webui/login.html

Accept-Language: de-DE

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)

Accept-Encoding: gzip, deflate

Host: sso.dom.***.lan:8443

Connection: Keep-Alive

Cookie: JSESSIONID=70587AB932F49ADA1168C9DD368A4623

Authorization: Negotiate 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

HTTP/1.1 401 Unauthorized

Server: Apache-Coyote/1.1

WWW-Authenticate: Negotiate oX0we6ADCgEBoQsGCSqGSIL3EgECAqJnBGVgYwYJKoZIhvcSAQICAwB+VDBSoAMCAQWhAwIBHqQRGA8yMDE4MDYxODE0MDEzM1qlBQIDDtcdpgMCASmpDxsNRE9NLkZUQVBJLkxBTqoWMBSgAwIBAaENMAsbCXNzb3RvbWNhdA==

Connection: keep-alive

Cache-Control: no-cache, no-store, max-age=0, must-revalidate

Pragma: no-cache

Expires: 0

Strict-Transport-Security: max-age=31536000 ; includeSubDomains

X-XSS-Protection: 1; mode=block

X-Frame-Options: DENY

X-Content-Type-Options: nosniff

Transfer-Encoding: chunked

Date: Mon, 18 Jun 2018 14:01:33 GMT

GET /sso/sso.html HTTP/1.1

Accept: image/gif, image/jpeg, image/pjpeg, application/x-ms-application, application/xaml+xml, application/x-ms-xbap, */*

Referer: https://sso.dom.***.lan:8443/webui/login.html

Accept-Language: de-DE

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)

Accept-Encoding: gzip, deflate

Host: sso.dom.***.lan:8443

Connection: Keep-Alive

Cookie: JSESSIONID=70587AB932F49ADA1168C9DD368A4623

Authorization: Negotiate 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

HTTP/1.1 401 Unauthorized

Server: Apache-Coyote/1.1

WWW-Authenticate: Negotiate oXAwbqADCgEBomcEZWBjBgkqhkiG9xIBAgIDAH5UMFKgAwIBBaEDAgEepBEYDzIwMTgwNjE4MTQwMTMzWqUFAgMPFDymAwIBKakPGw1ET00uRlRBUEkuTEFOqhYwFKADAgEBoQ0wCxsJc3NvdG9tY2F0

Connection: keep-alive

Cache-Control: no-cache, no-store, max-age=0, must-revalidate

Pragma: no-cache

Expires: 0

Strict-Transport-Security: max-age=31536000 ; includeSubDomains

X-XSS-Protection: 1; mode=block

X-Frame-Options: DENY

X-Content-Type-Options: nosniff

Transfer-Encoding: chunked

Date: Mon, 18 Jun 2018 14:01:33 GMT

I would apprectiate any help on how to continue the troubleshooting. 

Many thanks

[oliv...@gmail.com]

Also, in addition, kerbtray.exe at Client shows:

 

[oliv...@gmail.com]

The problem was a invalid SSL certificate on the server side.