ZCO 7.1.1 SSO how to use

[tbovingdon]

Hello everyone,

this may sound like a silly question but... SSO doesn't seem to be working with 7.1.1 ZCO.. are we to configure it somehow?

[dpitt]

First off your Zimbra server and Windows Domain Controller need to be set up for SPNEGO SSO as per the server instructions. If you've got this bit right then SSO should already be working correctly with the Zimbra web client (i.e. you can login without being prompted to supply credentials, and when you logout you are given a simple 'Launch' dialog to reconnect).

Then for ZCO you just need to:
- ensure that the server name in your Outlook profile matches the full name used in the SPNEGO configuration
- disable the StorePassword registry setting (in \Software\Zimbra, HKCU takes precedence over HKLM)

Both of these can be done within the MSI for new profiles using the instructions in the ZCO Admin Guide.

[Yopofun]

I have gone through the steps in the following document, but couldn't go any further as the file /opt/zimbra/jetty/webapps/spnego/spnego_preauth.jsp, that it asks me to edit, on page 323, doesn't exist.

http://files.zimbra.com/website/docs...uide%207.0.pdf

Any advice?

I'm running network-7.1.1

[dpitt]

Sorry - out of my depth (I'm a client guy). You need to post your query to one of the server forums.

When I set the server side up I used a script supplied by the server guys which seemed to largely consist of zmprov calls. I didn't directly edit any jsp files.

[tbovingdon]

We have same issue.. the JSP file does not exisit...

[bpn-mag]

Same issue again...
I can't configure SSO because I don't have the /opt/zimbra/jetty/webapps/spnego directory.
Someone have a solution ?

[alex_rhys-hurn]

Spnego seems to have moved, in Zimbra 8 FOSS:

/opt/zimbra/jetty/webapps/service/spnego/

Alex