Maybe this is in the documentation somewhere…but i just lost a week of time trying to get SSO working between a fresh install of both domino 6.5 and websphere 5 express…not SSO entirely…when using a web browser it worked fine… but in using DIIOP it wouldnt work.
I am using the internet sites view and i have about 6 sites setup. I also had an IIOP document and an LDAP document for authentication. I was trying to connect to the domino server using DIIOP and constantly getting errors. Mostly “Cookie is invalid” errors. This made no sense since i was able to use a browser, authenticate and move between servers no problem.
So i turned on all the DIIOP debugging and discovered that the DIIOP server wasnt putting the DIIOP_IOR.txt file in the domino\html directory. I soon discovered that it was putting the DIIOP_IOR file in the home directory of the very last internet site document in the internet sites view. If i removed the last site, and restarted diiop it would then create the file in the last site again. Mind you, this is a fresh, non-upgraded version of domino 6.5.
Upon further investigation, i noticed that i had the “Organization” field in all of these sites set to “MyCompanyName”. I decided to move the last site into a new Organization. Voila! the diiop server put the file in home directory of the last internet site in the organization.
So FYI for everyone. It appears that if you are doing SSO with websphere AND you have an IIOP internet site document, you need to make sure that the IIOP site document, LDAP document, and Website Document for the site you want to host the DIIOP are all in the same organization (meaning make sure the organization field on each one matches)… and make sure you dont have any other websites listed in that organization. otherwise it appears DIIOP freaks out.
just thought i would share.
thanks,
eric