The first time you sign into developerWorks, a profile is created for you. Select information in your profile (name, country/region, and company) is displayed to the public and will accompany any content you post. You may update your IBM account at any time.

All information submitted is secure.

The first time you sign in to developerWorks, a profile is created for you, so you need to choose a display name. Your display name accompanies the content you post on developerworks.

Please choose a display name between 3-31 characters. Your display name must be unique in the developerWorks community and should not be your email address for privacy reasons.

All information submitted is secure.

My developerWorks:

My notifications:

Sign out

Select a language:

Integrating SPNEGO with IBM Sametime components on a federated deployment

Conall O'Cofaigh (OCOFAIGH@ie.ibm.com), Software Engineer, IBM

Conall O'Cofaigh is a Software Engineer working on the Sametime Verification Test team. He's been with IBM since 2008, focusing on integration and interoperability across Lotus Sametime products.

Tony Payne (TONY_PAYNE@us.ibm.com), Software Engineer, IBM

Tony Payne has been an IBM Sametime Software Engineer for 12 years, with a focus / special attention on cross-product interoperability and security architecture, and has worked on Level 3 Customer Support for the past two years.

Summary: This paper explains the steps to configure Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO) on a federated deployment for IBM Sametime Community Server, Meeting Server, Proxy Server, Media Manager, Advanced Server, and the Connect Client. SPNEGO enables the SSO mechanism for Microsoft Windows clients that are part of a Microsoft Active Directory Domain.

Date: 24 Aug 2012 (Published 21 Aug 2012)
Level: Intermediate

Activity: 8850 views
Comments:

Get the download

This paper explains the steps to configure Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO) on a federated deployment for IBM Sametime Community Server, Meeting Server, Proxy Server, Media Manager, Advanced Server, and the Connect Client. SPNEGO enables the SSO mechanism for Microsoft Windows clients that are part of a Microsoft Active Directory Domain.

In this white paper

Overview
Adding machines to the Active Directory domain
Configuring Active Directory Server
Configuring SSO
Configuring SPNEGO on WAS
Enabling the Snoop servlet in WAS
Creating a unique Security Domain for the System Console
Configuring the client
Troubleshooting and testing
Conclusion
Resources
Author biographies

Download

Description	Name	Size	Download method
White paper in PDF format	IntegratingSPNEGOSametimeFederatedDeployment_FinalR1.pdf	1,385 KB	HTTP

Information about download methods Get Adobe® Reader®

Resources

Participate in the discussion forum.
developerWorks Lotus Sametime product page.
developerWorks white paper, " Integrating SPNEGO with IBM Sametime 8.5.2 components using IBM WebSphere Application Server."
IBM Sametime wiki article, " Manually setting up a full IBM Sametime 8.5.2 environment."
developerWorks WebSphere Application Server zone.

Biographies

Conall O'Cofaigh is a Software Engineer working on the Sametime Verification Test team. He's been with IBM since 2008, focusing on integration and interoperability across Lotus Sametime products.

Comments