We have an odd situation currently as we are trying to implement the Secure Login client on all of our 75+ Windows 2003 servers in our Citrix-farms. The Netweaver system that runs the Secure Login server is setup to validate users based on SPNego i.e. the Secure Client will use Kerberos to negotiate a certificate from the Secure Login server. On some of the servers the Secure Login client works fine, connects to the Secure Login server gets validated and retrieves a user certificate, but on some of the servers the Secure Login client replies with 'Supplied credentials not accepted by the server'.
As I understand the whole process, the Secure Client initiates the communication by talking to the domain controller in the Windows network to get a TGS ticket. With this TGS ticket it should be able to talk to the Secure Login server and get the certificate. Has anyone ever seen anything like this before? We have an open Microsoft support ticket as the issue appears to be Microsoft-related, but I was wondering if anyone had seen similar issues while implementing an SSO-solution based on Netweaver Secure Login.
Best regards,
Anders