Tm1Web Integrated login across 2 or more servers.

[Martin Erlmoser]

Hi,

integrated login in tm1web doesn't work in our environment when i split the TM1Server from the TM1Web Server.. on the webserver itself it works - but on none client. everytime when you try to access the tm1weblogin.aspx you get a windows login window.. after ~10 times of entering your name+pwd you get "HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials.
Internet Information Services (IIS)"

Server1:
= adminhost (9.1 Sp3 U1)
IIS 6.0 - Tm1Web
is configured for "Integrated Windows Authentication"
also ->
C:\Inetpub\AdminScripts>cscript adsutil.vbs set W3SVC/1/ROOT/tm1test/NTAuthenticationProviders "Negotiate, NTLM"
my domainuser has been added to the IIS_WPG Grp on the Webserver.

NTAuthenticationProviders : (STRING) "Negotiate, NTLM"

i also created a new applicationpool with runs under the same domainuser as the tm1server.
also executed both needed setspn commands

Server2:
TM1Server konfigured for Kerberos Auth - domainuser account which has the option set "trusted for delegation for any Kerberos service"


9.1 Sp3 U1
Windows 2003 SP2
Client: Windows XP / 2003 / IE 6.0 / IE 7.0

i think i did everything whats described in the operationsguide, i have no idea which setting is missing.. or whats the reason for the failure..

thanks