I've never posted here before, so I hope this is the right forum category.
I'm trying to get single sign-on working for our web application and I'm not having much luck. The setup is two separate domain forests, clientdomain.com and serverdomain.com.
The web application is installed on serverdomain.com. Before we added clientdomain.com to the mix, SSO was working correctly (everything was running locally on serverdomain.com). But when I try to connect to the web application from clientdomain.com, I'm
getting kerberos errors in the event viewer:
A Kerberos error message was received:
on logon session
Client Time:
Server Time: 13:41:42.0000 9/17/2020 Z
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Extended Error:
Client Realm:
Client Name:
Server Realm: SERVERDOMAIN.COM
Server Name: krbtgt/CLIENTDOMAIN.COM
Target Name: krbtgt/CLIENTDOMAIN.COM@SERVERDOMAIN.COM
Error Text:
File: onecore\ds\security\protocols\kerberos\client2\kerbtick.cxx
Line: 127f
Error Data is in record data.
I'm a programmer and not an IT guy, so I've been doing tons of searching online but I haven't found anything that works.
The trust is one-way. SERVERDOMAIN.COM trusts CLIENTDOMAIN.com. The expectation is that users on CLIENTDOMAIN.com can connect to the web application running on webserver.serverdomain.com without any login prompts.
There is also a network load balancer in front of serverdomain.com with SSL configured. The load balancer dns name is clients.testing.serverdomain.com.
Any help would be greatly appreciated. Thank you!