ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexWebSphere Message Broker SupportSetup Kerberos in a Load balanced message broker environment

Post new topicReply to topic
Setup Kerberos in a Load balanced message broker environment View previous topic :: View next topic
Author Message
rama91
PostPosted: Wed Aug 28, 2019 6:46 am Post subject: Setup Kerberos in a Load balanced message broker environment Reply with quote

Newbie

Joined: 28 Aug 2019
Posts: 2

Hello WMB Gurus,

We have IIB 10.0.0.12 running on Windows Server 2012 R2. We are looking to setup Kerberos -Token based authentication for SOAP services that are exposed to internal/external consumers.

We have around 4 System test servers running on a Same domain. The test servers are not load balanced; can we create a Single User account (Say "IIBTestPrincipal") in Active Directory and map multiple SPN's to this user account and setup the test environments like below.

setspn -A HTTP/server3.somedomain.co.uk@SOMEDOMAIN.CO.UK IIBADPrincipal

setspn -A HTTP/server5.somedomain.co.uk@SOMEDOMAIN.CO.UK IIBADPrincipal

Can somebody please advice/ guide on process for setting the same in load balanced environment.?

We have 4 broker servers load balanced via Netscalar. Can the load balancer perform a kerberos passthrough and broker perform all the kerberos authentication work ? If so should we be creating a SPN on Load balancer Host name and map all the prod servers as alias to that SPN ?

Couldn't find much info from Info center,Any thoughts on the above are much appreciated.

Thank You,
Ram
Back to top
View user's profile Send private message
Display posts from previous:
Post new topicReply to topic Page 1 of 1

MQSeries.net Forum IndexWebSphere Message Broker SupportSetup Kerberos in a Load balanced message broker environment
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.