Tomcat running as LocalSystem

[gentisaliu]

I have SSO running well with Waffle and Tomcat 8.5 in one of my webapps whenever I access that webapp from the local machine.

If I access the webapp from another machine in the domain, I get a password prompt instead of SSO.

I fixed this per the Waffle FAQs by running Tomcat as LocalSystem, however I would like to go back to running it as a service account due to the obvious security risks involved with services running as LocalSystem.

What privileges from LocalSystem are required for the service account to make this work?

[hazendaz]

@gentisaliu A newer release is coming out this weekend and you could use current master now as well that might help. Some underlying changes were made to fix some negotiation issues. I don't know if it will resolve this issue but would love to see a retest to see if it still affects the current master.

[gentisaliu]

Is there any chance we could have those changes in the 1.9.x version? I am using a legacy application which does not work with the waffle 2.x versions.

[hazendaz]

What is the purpose of using 1.9 still? 2.x was just jna upgrade. Get Outlook for Android<https://aka.ms/ghei36>

…

________________________________ From: Genti Saliu <[email protected]> Sent: Thursday, February 20, 2020 5:34:34 AM To: Waffle/waffle <[email protected]> Cc: Jeremy Landis <[email protected]>; Comment <[email protected]> Subject: Re: [Waffle/waffle] Tomcat running as LocalSystem (#782) Is there any chance we could have those changes to the 1.9.x version? We are using a legacy application which does not work with the waffle 2.x versions. — You are receiving this because you commented. Reply to this email directly, view it on GitHub<#782?email_source=notifications&email_token=AAHODI3SKU63K74OZFMFP6TRDZMDVA5CNFSM4IWYLB52YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEMNFCCI#issuecomment-588927241>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AAHODI56E3B4VGYE45HQFGLRDZMDVANCNFSM4IWYLB5Q>.