on 10-02-2014 9:17 AM
Dear Community,
We've been working for many years with SSO on ABAP working fine using library gx64krb5.dll.
Since we ugraded to EHP7 for SAP ERP 6.0 (Stack 04) we would like to take the opportunity to also connect in SSO on ABAP web and JAVA.
I have have followed the implementation for SPNEGO on ABAP side on our SandBox as described in the videos http://scn.sap.com/docs/DOC-40178 but half success.
The good news is that the ABAP stack starts well, no shouting.
So we went from
snc/gssapi_lib = $(DIR_EXECUTABLE)\gx64krb5.dll
snc/identity/as = p:SAPServiceSBX@MYCOMPANY.NET
to
snc/gssapi_lib = $(DIR_INSTANCE)\SLL\sapcrypto.dll
snc/identity/as = p:SAPServiceSBX
(I replaced my company name with MYCOMPANY.NET)
The SAP GUI can connect without SNC
The bad news is that the SAP GUI does connect in SNC. The SNC filed up my previous connections automatically with p:CN=SAPServiceSBX.
But I am getting the following error message attached.
Can somebody help please ?
Hi Dan,
I would like to understand your use case. You wrote that you want to implement SPNego for ABAP.
But your issue is related to SNC wiht SAP GUI. If you want to use SNC with SAP GUI and use your windows authentication (kerberos ticket) for SNC connection you need a Secure Login Client on your client workstation. Did you have it installed? Your error message looks like you are using another component for SNC connection.
Could you check on your client workstation where your SNC lib (SNC_LIB ) is pointing out?
KR
Valerie
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello Dan,
try changing the parameter snc/identity/as to p:CN=SAPServiceSBX
Regards,
Thomas
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Dan,
I was in a hurry yesterday. Now a bit more precise answer.
According to my experience the SNC-Name has to contain the domain name. So please try to change the parameter snc/identity/as and the SNC name in SAP GUI to p:CN=SAPServiceSBX@MYDOMAIN.LOCAL
Do you also have the Secure Login Client installed? Please have a look where the environment variable SNC_LIB is pointing to.
Please also have a at look at the implementation guide
Regards Thomas
User | Count |
---|---|
84 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.