How to force an explicit login on SSO enabled server using RTC Java API?
Hello everyone,
for some internal tools and our automated tests we are now encountering a problem which is:
Since a few days SSO (Single-Sign-On) based on Kerberos has been enabled on some of our test systems.
Our tools that run against the test systems and also many of our automated tests need to login to these systems using a different user account than the currently logged in windows user.
All this code now fails with the following exception:
com.ibm.team.repository.transport.client.NoUserCredentialsAcceptedException: CRJAZ2844E The following URL could not be reached because the server does not accept a user ID and password for authentication: /rm/service/com.ibm.team.repository.common.internal.IRepositoryRemoteService.
Does the server need to be reconfigured to also allow user id and password based authentication or what else could you propose me?
2 answers
First - always give the version of the product you are seeking help for.
Do you want to disable the RTC login from the SSO for all users? Not sure if it could be done only for select users like your automated test user.
There are several questions already asked on this topic --
Comments
Hi Marko,
I have never looked into Kerberos in detail, so I can't confirm that the following options will work for you, but the following is what came into my mind:
- Allow UserId/Password in general (the obvious and easy solution)
- A second, not well known JTS, where you can limit the number of users that have access to. Only that JTS would allow UserId/Password and will generate the LTPA token necessary to connect to the other apps. (kind of a hack, I know)
- Scripted Authentication, see https://jazz.net/help-dev/clm/index.jsp?topic=%2Fcom.ibm.jazz.install.doc%2Ftopics%2Fc_kersso_cli_scripted_auth.html (looks like the most promising solution)
Cheers, Lukas
Comments
Marko Tomljenovic
Mar 05 '18, 7:14 a.m.