Support for Kerberos (Enhanced) 

Use

SAP NetWeaver 7.1 enables the use of the Kerberos configuration wizard to configure the AS Java for Kerberos authentication with SPNego. The configuration wizard guides security administrators to each step in the configuration, provides hint menus for each of the changes  and contains  testing capabilities for configuration changes, for example the configuration for user resolution in the Kerberos Domain Controller.

In addition, the Kerberos configuration wizard enables the configuration of the AS Java for Kerberos authentication of users from multiple Kerberos domains. The configuration changes for the AS Java are executed entirely from the wizard.

Effects on Existing Data

When executed the wizard based Kerberos configuration updates and replaces the existing Kerberos authentication stack configurations on the AS Java.

Effects on Data Transfer

The Kerberos configuration wizard simplifies the configuration effort for authentication AS Java users with Kerberos. The Kerberos authentication itself continues to utilize the Simple and Protected GSS-API Negotiation Mechanism (SPNego) for the transparent negotiation of the Kerberos authentication.

Effects on System Administration

The configuration wizard makes changes relevant for the AS Java. The Kerberos Domain Controller and enabling browser clients to use integrated authentication with Kerberos configurations must still be preformed in addition to the wizard.

In addition, the wizard simplifies the Kerberos configuration for single or multiple domains by using a step by step guided approach to the Kerberos configuration changes relevant for the AS Java.