Web console (non-rms)
Home  » Web console (non-rms)

Web console (non-rms)
Posted: Tue, Feb 09, 2010 9:25 AM :: Rank: 0
Author
Points: 5646
Level: System Center Specialist

So I am having issues browsing from a Visio linked diagram and I just read that the Web Console should be on my RMS. My install errors out for some reason when try to install the web console on the RMS. Is there a way to make this work with windows authentication the way it is? Or are there special instructions for installing the web console after the fact?

   Report Abuse
Re: Web console (non-rms)
Posted: Tue, Feb 09, 2010 9:44 AM :: Rank: 0
Author
Points: 40744
Level: System Center Expert
I would say never put the Web Console on the RMS and to my knowledge is best the best and only supported way via windows authentication.

You can however uninstall the web console and re-install when ever you want.
   Report Abuse
Re: Web console (non-rms)
Posted: Tue, Feb 09, 2010 10:56 AM :: Rank: 0
Author
Points: 5646
Level: System Center Specialist

I was thinking the same in my production environment. Keep it from doing more work in as many ways as possible. However in test decided to combine the roles. I now notice production does not pass credentials and test does. So I am wondering what the breakdown is security wise. Or is what M$ is saying is indeed the problem. here is the source I am referencing...



http://technet.microsoft.com/en-us/library/bb735415.aspx



Windows Authentication can be used if all of your users access Operations Manager from within the intranet.



Note

The Web console server must be installed on the root management server if you select Windows Authentication.





If your users will be accessing the Web console from the Internet, select Forms Authentication.



Note

The best practice for accessing the Web console from the Internet is to use forms-based authentication with SSL with the Web console.



 

   Report Abuse
Re: Web console (non-rms)
Posted: Tue, Feb 09, 2010 2:18 PM :: Rank: 0
Author
Points: 28999
Level: System Center Expert
Hi Bryan,



looks like you are running into the double-hop problem:

http://www.systemcentercentral.com/Downloads/DownloadsDetails/tabid/144/IndexID/6193/Default.aspx



also look at this post for details about the double hop: http://blogs.technet.com/askds/archive/2008/06/13/understanding-kerberos-double-hop.aspx



I ran into the same issue last week and these posts helped me to solve the issue. Attention, when you use Windows 2008 or Windows 2008R2 you need to set the delegation to "Trust this computer for delegation to any service".



cheers,

Stefan

http://www.code4ward.net
   Report Abuse
Re: Web console (non-rms)
Posted: Tue, Feb 09, 2010 2:49 PM :: Rank: 0
Author
Points: 5646
Level: System Center Specialist
Stefan,

I have a good feeling about this. I will report back if/when it solves the problem.

   Report Abuse

Home  » Web console (non-rms)
Top Contributors
Featured Members
Pete Zerger
Points: 65442
Level: System Center Expert
Tommy Gunn
Points: 42712
Level: System Center Expert
Simon Skinner
Points: 40744
Level: System Center Expert
Stefan Koell
Points: 28999
Level: System Center Expert
Andreas Zuckerhut
Points: 27434
Level: System Center Expert