Web console (non-rms)
Home  » Operations Manager  » Web console (non-rms)

Web console (non-rms)
Posted: Tue, Feb 09, 2010 9:25 AM :: Rank: 0
Author
Points: 900
Level: System Center Hero

So I am having issues browsing from a Visio linked diagram and I just read that the Web Console should be on my RMS. My install errors out for some reason when try to install the web console on the RMS. Is there a way to make this work with windows authentication the way it is? Or are there special instructions for installing the web console after the fact?

Reply  
Report Abuse
Re: Web console (non-rms)
Posted: Tue, Feb 09, 2010 9:44 AM :: Rank: 0
Author
Points: 24529
Level: System Center Expert
I would say never put the Web Console on the RMS and to my knowledge is best the best and only supported way via windows authentication.

You can however uninstall the web console and re-install when ever you want.
Reply  
Report Abuse
Re: Web console (non-rms)
Posted: Tue, Feb 09, 2010 10:56 AM :: Rank: 0
Author
Points: 900
Level: System Center Hero

I was thinking the same in my production environment. Keep it from doing more work in as many ways as possible. However in test decided to combine the roles. I now notice production does not pass credentials and test does. So I am wondering what the breakdown is security wise. Or is what M$ is saying is indeed the problem. here is the source I am referencing...



http://technet.microsoft.com/en-us/library/bb735415.aspx



Windows Authentication can be used if all of your users access Operations Manager from within the intranet.



Note

The Web console server must be installed on the root management server if you select Windows Authentication.





If your users will be accessing the Web console from the Internet, select Forms Authentication.



Note

The best practice for accessing the Web console from the Internet is to use forms-based authentication with SSL with the Web console.



 

Reply  
Report Abuse
Re: Web console (non-rms)
Posted: Tue, Feb 09, 2010 2:18 PM :: Rank: 0
Author
Points: 12674
Level: System Center Expert
Hi Bryan,



looks like you are running into the double-hop problem:

http://www.systemcentercentral.com/Downloads/DownloadsDetails/tabid/144/IndexID/6193/Default.aspx



also look at this post for details about the double hop: http://blogs.technet.com/askds/archive/2008/06/13/understanding-kerberos-double-hop.aspx



I ran into the same issue last week and these posts helped me to solve the issue. Attention, when you use Windows 2008 or Windows 2008R2 you need to set the delegation to "Trust this computer for delegation to any service".



cheers,

Stefan

http://www.code4ward.net
Reply  
Report Abuse
Re: Web console (non-rms)
Posted: Tue, Feb 09, 2010 2:49 PM :: Rank: 0
Author
Points: 900
Level: System Center Hero
Stefan,

I have a good feeling about this. I will report back if/when it solves the problem.

Reply  
Report Abuse

Home  » Operations Manager  » Web console (non-rms)
Tag Cloud
Quick Links
Top Contributors
Pete Zerger
Points: 29460
Level: System Center Expert
Simon Skinner
Points: 24529
Level: System Center Expert
Tommy Gunn
Points: 21237
Level: System Center Expert
Stefan Koell
Points: 12674
Level: System Center Expert
MadHatter
Points: 11676
Level: System Center Expert