Configure LiveCycle SPNEGO Authentication Handler

Perform following steps to Configure Adobe LiveCycle SPNEGO Authentication Handler:

1. Open http://[server]:[port]/system/console/configMgr.
2. Click Adobe LiveCycle SPNEGO Authentication Handler and specify following information:
- In the path field, specify the path of the repository for which the authentication is required.
- In the Ranking field, specify 6000.
- In the KDC Host field, specify the IP address or fully qualified domain name of the Active Directory server.
- In the Active Directory Domain field, specify the domain name of the Active Directory.
- In the Kerberos Service Principal field, specify the principal name of the Kerberos service.
- In the Service Principal Password field, specify the password of the principal name.
- Leave the Additional Properties field blank.
- In the Trusted Credential Attribute field, specify TrustedInfo.
Click Configure to activate Adobe LiveCycle SPNEGO Authentication Handler.
To verify the activation, open http://[server]:[port]/system/console/slingauth and ensure that Adobe LiveCycle Kerberos/SPNEGO Authentication Handler is listed in Registered Authentication Handler.

Navigate to [LiveCycle root]\crx-repository\repository\ and open the file repository.xml for editing and add the trust_credentials_attribute parameter:

Existing Code

<LoginModule class="com.day.crx.core.CRXLoginModule"> 
    <param name="anonymousId" value="anonymous"/> 
    <param name="adminId" value="admin"/> 
</LoginModule>

Replacement Code

<LoginModule class="com.day.crx.core.CRXLoginModule"> 
    <param name="anonymousId" value="anonymous"/> 
    <param name="adminId" value="admin"/> 
    <param name="trust_credentials_attribute" value="TrustedInfo"/> 
</LoginModule>

Restart the application server.