Tell me doing wrong. Openfire 4.1.4 Win , Spark 2.8.3 + SSO

Настраиваю как Openfire с поддержкой SSO [CorpDocs]

Spark при коннекте говорит:

Unable to connect using Single Sing-On. Please check your principal and server setings.

spark.properties :

hostAndPort=True

xmppHost=sdrk.strdp.local

xmppPort=5222

ssoMethod=dns

ssoEnabled=True

server=stroydepo.local

useHostnameAsResource=True

autoLoginEnabled=True

showEmptyGroups=True

showOfflineUsers=True

offlineGroupVisible=False

starthidden=False

loginAsInvisibleEnabled=False

debuggerEnabled=True

output.log :

Debug is true storeKey false useTicketCache true useKeyTab false doNotPrompt true ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false

Acquire TGT from Cache

Principal is i.sdrk@STRDP.LOCAL

Commit Succeeded

Spark send

<stream:stream xmlns=‘jabber:client’ to=‘strdp.local’ xmlns:stream=‘http://etherx.jabber.org/streams’ version=‘1.0’ from=‘i.sdrk@strdp.local’ xml:lang=‘en’>

<stream:stream xmlns=‘jabber:client’ to=‘strdp.local’ xmlns:stream=‘http://etherx.jabber.org/streams’ version=‘1.0’ from=‘i.sdrk@strdp.local’ xml:lang=‘en’>

AGkuc2lkb3JlbmtvAA==

Spark recei…:

<?xml version='1.0' encoding='UTF-8'?>PLAINANONYMOUSNTLM <?xml version='1.0' encoding='UTF-8'?>PLAINANONYMOUSNTLMzlib

SSO is not easily accomplished. With spark, sso requires the sasl mech of gssapi, and not ntlm. There are a few guides on the forums to help you out.

give a link where to dig.

I want to configure transparent authentication network Win AD . The easiest way

How to Setup SSO on Windows Server 2008r2/2012r2 with a Domain level of 2008r2/2012r2

Here are a few more, but I have not used them

28 Steps to Single Sign On for Openfire XMPP Server on Windows Server 2012 R2 with Spark

Openfire+Spark on Windows Server 2008 R2 with SSO