IBM Support

Using Kerberos Authentication to an HTTP Server That Does Not Use the Standard Port 80

Troubleshooting


Problem

When using an HTTP server that is listening on a port other than the standard port of 80, the Kerberos principal needs to have this as part of the host name.

Resolving The Problem

When using an HTTP server that is listening on a port other than the standard port of 80, the Kerberos principal needs to have this as part of the host name; for example, HTTP/www.mycompany.com:8080@MYCOMPANY.COM.

To add this principal in qshell, you should type the following:

keytab add HTTP/www.mycompany.com:8080@MYCOMPANY.COM -p password

where www.mycompany.com:8080 is the host name and port for the HTTP server
MYCOMPANY.COM is the Windows domain
password is the Active Directory server account password

The Active Directory account needs to be added with the same principal name.

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"6.1.0"}]

Historical Number

572203891

Document Information

More support for:
IBM i

Software version:
6.1.0

Operating system(s):
IBM i

Document number:
686141

Modified date:
18 December 2019

UID

nas8N1012032

Manage My Notification Subscriptions