Skip to Content
0
May 27, 2014 at 10:22 AM

Problem set-up Single Sign-On using Kerberos

56 Views

Hi All,

We are getting problem when we configure SSO in our system.

Please find the below steps we did in the system

1) Created ZA domain user at OS level and Oracle level (xxxsvc-013ds5)

2) Downloaded win64sso.zip (from OSS Note 352295). Unzip it and placeed the kerberos file on C:\WINDOWS\SysWOW64\gx64krb5.dll

3) Below SNC parameters created at SAP instance profile

snc/identity/as p: xxxsvc-013ds5@ZA.xx.yyyy.NET

snc/gssapi_lib C:\WINDOWS\SysWOW64\gx64krb5.dll

snc/permit_insecure_start 1

snc/data_protection/min 1

snc/data_protection/max 1

snc/accept_insecure_rfc 1

snc/accept_insecure_gui 1

snc/accept_insecure_cpic 1

snc/force_login_screen 1

snc/enable 1

4) We are not able to start SAP when we changed Log On AS of SAPDS5_00 service from SAPserviceDS5 to ZA domain user and getting the below error.

5)We revert back the SSO parameter settings and changed Log On AS of SAPDS5_00 service from ZA domain user to SAPserviceDS5. We started SAP and DB services system without any issue. Now the system is up and running fine without SSO configuration.

Please correct me if i did any mistake in the above steps and help me to resolve this ASAP.

Regards

Subb

Attachments

pastedImage_4.png (111.4 kB)