You use the SPNego configuration application of SAP NetWeaver Application Server (AS) Java for configuring Kerberos authentication. You can access it in two ways:
As a standalone application using the following URL in your Web browser:
<http/https>://<NW_host>:<NW_Web_port>/spnego
As part of SAP NetWeaver Administrator
To access the application, choose
.The AS Java delivers authorizations to protect access to the user interface for the configuration of SPNego. The table below lists the user management engine (UME) actions and the default role assignments for access to the configuration user interface.
Service/Application |
Name |
Description |
Default Role Assignments |
---|---|---|---|
security |
editSPNEGO |
Provides read-write access to the SPNEGO Web Dynpro configuration application |
|
security |
viewSPNEGO |
Provides read-only access to the SPNEGO Web Dynpro configuration application |
SPNEGO_ READONLY |
tc~ lm~ webadmin~ permissions |
NWA_ SUPERADMIN_ SPNEGO_ CONF |
Provides read-write access to the SPNEGO Web Dynpro configuration application |
|
tc~ lm~ webadmin~ permissions |
NWA_ READONLY_ SPNEGO_ CONF |
Provides read-only access to the SPNEGO Web Dynpro configuration application |
NWA_ READONLY |
The AS Java continues to deliver legacy actions that are no longer required.
Service/Application |
Name |
Description |
Default Role Assignments |
---|---|---|---|
security |
NWA_ SUPERADMIN_ SPNEGO_ CONF |
Legacy action for read-write access |
None |
security |
NWA_ READONLY_ SPNEGO_ CONF |
Legacy actions for read-only access |
None |
The AS Java delivers roles for SPNego configuration as listed in the table below.
Name |
Assigned Actions |
Description |
---|---|---|
SPNEGO_ READONLY |
viewSPNEGO |
Provides read-only access to the SPNEGO Web Dynpro configuration application |
SPNEGO_ SUPERADMIN |
editSPNEGO |
Provides read-write access to the SPNEGO Web Dynpro configuration application |
The SAP NetWeaver administrator wants to grant Donna Moore the permissions to administrate the SPNEGO configuration. These permissions are implied by the editSPNEGO action. By default, this action is assigned to the SPNEGO_ SUPERADMIN role. The SAP NetWeaver administrator calls the user management configuration application and assigns the role SPNEGO_ SUPERADMIN to user Donna Moore.
For more information about the user management configuration application, see Configuring User Management.