I am trying to configure pass-through authentication to allow our technicians and requestors to login with their AD details and not have to enter the details again.
I have successfully created the AD System accounts and everything appears to be configured correctly however Pass-through authentication is not working.
Upon further inspection of the system logs I suspect that SDP is running with an incorrect time zone somewhere, despite the server and user accounts having the correct time zone applied I've seen that in the system logs the time is out although the date is correct: (extract form the logs)
| Module |
: |
Admin |
| Sub Module |
: |
- |
| Type |
: |
Error |
| Action |
: |
|
| Occurred At |
: |
Feb 10, 2015 02:41 AM |
| Probable Cause |
: |
- |
| Performed By |
: |
administrator |
At 02:41 AM I was sleeping happily in my nice warm bed. I actually ran this at 09:50 AM.
This I know would stop Kerberos/NTLM authentication from working as a time difference of more than 2 hours will always prohibit authentication.
I've gone through the time checking and updated the java timezone settings however this has not made any difference, it appears that SDP is simply not pulling the correct time information through, does anyone else know of a way that I can get around the time information being incorrect?