For the Files Advanced Server

In this section

Configuring the domain account used for Single Sign-on authentication

Setting the Kerberos domain lookup

Enabling Single sign-on in the web interface

Configuring the LDAP account that will handle SSO

Configuring the domain account used for Single Sign-on authentication
  1. Navigate to C:\Program Files (x86)\Acronis\Files Advanced\Access Server\Web Application\WEB-INF\
  2. Find and open the file web.xml. In this file you will set the domain username and password that the SSO service will run under.

    This account must match the account that you will use to register the HTTP service with Kerberos in the following sections, so we recommend writing it down.

  3. In web.xml there are two properties that need to be set - the domain username and password that the SSO service will use. Find the following lines:

        <init-param>

            <param-name>spnego.preauth.username</param-name>

            <param-value>yourusername</param-value>

        </init-param>

        <init-param>

            <param-name>spnego.preauth.password</param-name>

            <param-value>yourpassword</param-value>

        </init-param>

  4. Replace yourusername with the desired LDAP username.
  5. Replace yourpassword with the LDAP password for the LDAP account specified above. If you have one of these five special characters in your password: &, >, ", ' , or <, you will have to properly escape them in the XML document. To do so, you will have to replace them with the following:

    e.g. if your password is <my&best'password" you will have to write it in the web.xml file as follows: &lt;my&amp;best&apos;password&quot;