Configuring IBM SPSS Modeler client

  1. Enable Java to access the TGT session key:
    1. From the Start menu, click Run.
    2. Enter regedit and click OK to open the Registry Editor.
    3. Navigate to the registry location appropriate to the operating system of the local machine:
      • On Windows XP: My Computer\HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos
      • On Windows Vista, or Windows 7: My Computer\HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters
    4. Right-click the folder and select New > DWORD. The name of the new value should be allowtgtsessionkey.
    5. Set the value of allowtgtsessionkey to a hexadecimal value of 1, that is 0x0000001.
    6. Close the Registry Editor.
    7. Note there is a known issue when the user account is a member of the local Administrators group and User Account Control (UAC) is enabled. In this case, the session key in the retrieved service ticket is empty, which causes SSO authentication to fail. To avoid this issue, perform one of the actions:
      • Run the application as Administrator
      • Disable User Account Control
      • Use an account that is not an Administrator account
  2. In the config folder of the IBM® SPSS® Modeler installation location, create a folder called sso.
  3. In the sso folder, create a krb5.conf file. Instructions for how to create a krb5.conf file can be found at http://web.mit.edu/kerberos/krb5-current/doc/admin/conf_files/krb5_conf.html. An example of a krb5.conf file is provided below:
    [libdefaults]
     default_realm = MODELERSSO.COM
     dns_lookup_kdc = true
     dns_lookup_realm = true

[realms]
     MODELERSSO.COM = {
          kdc = ad.modelersso.com:88
          admin_server = ad.modelersso.com:749
          default_domain = modelersso.com
     }

[domain_realm]
     .modelersso.com = MODELERSSO.COM
     modelersso.com = MODELERSSO.COM
  4. Restart the local machine and the server machine.