Showing posts with label kerberos-authentication. Show all posts
Showing posts with label kerberos-authentication. Show all posts

Tuesday, 23 February 2016

Hana security: Authentication model Kerberos/SPNEGO

In security , I’ll explain how to configure SAP Hana authentication method based on:
  • Hana SSO with Kerberos authentication
  • Single Sign-on with SPNEGO 
My configuration will be based on a single container database architecture with my internal network.

For my setup I’ll use my lab environment based on VMware, Microsoft Server 2008 R2, SAP Hana Rev 101 on SLES 11 SP3 and Windows 7 Enterprise.

Disclaimer: For my deployment I’ll issue local certificate with no outside exposure.

In order execution
  • Register SLES server into DNS
  • Step-by-step check on Hana server
  • Create Hana Database service user in AD
  • Register service Principal Name (SPN) in AD
  • Generate the keytab file
  • Configure Kerberos from Hana studio
  • Configure SPNEGO for XS application