cancel
Showing results for 
Search instead for 
Did you mean: 

Connection with SNC not working (SSO 2.0)

Former Member
0 Kudos

Dear Community,

We've been working for many years with SSO on ABAP working fine using library gx64krb5.dll.

Since we ugraded to EHP7 for SAP ERP 6.0 (Stack 04) we would like to take the opportunity to also connect in SSO on ABAP web and JAVA.

I have have followed the implementation for SPNEGO on ABAP side on our SandBox as described in the videos http://scn.sap.com/docs/DOC-40178 but half success.

The good news is that the ABAP stack starts well, no shouting.

So we went from

snc/gssapi_lib = $(DIR_EXECUTABLE)\gx64krb5.dll

snc/identity/as = p:SAPServiceSBX@MYCOMPANY.NET

to

snc/gssapi_lib = $(DIR_INSTANCE)\SLL\sapcrypto.dll

snc/identity/as = p:SAPServiceSBX

(I replaced my company name with MYCOMPANY.NET)

The SAP GUI can connect without SNC

The bad news is that the SAP GUI does connect in SNC. The SNC filed up my previous connections automatically with p:CN=SAPServiceSBX.

But I am getting the following error message attached.

Can somebody help please ?

Accepted Solutions (0)

Answers (2)

Answers (2)

Former Member
0 Kudos

Hi Dan,

I would like to understand your use case. You wrote that you want to implement SPNego for ABAP.

But your issue is related to SNC wiht SAP GUI. If you want to use SNC  with SAP GUI and use your windows authentication (kerberos ticket) for SNC connection you need a Secure Login Client on your client workstation. Did you have it installed? Your error message looks like you are using another component for SNC connection.

Could you check on your client workstation where your SNC lib (SNC_LIB ) is pointing out?

KR

Valerie

Former Member
0 Kudos

Hello Dan,

try changing the parameter snc/identity/as to p:CN=SAPServiceSBX

Regards,

Thomas

Former Member
0 Kudos

Hi In fact, I made a mistake when I wrote my text. I already have this parameter p:CN=SAPServiceSBX I think otherwise it would come differently in the SAP GUI If you have another idea.

Former Member
0 Kudos

Hi Dan,

I was in a hurry yesterday. Now a bit more precise answer.

According to my experience the SNC-Name has to contain the domain name. So please try to change the parameter snc/identity/as and the SNC name in SAP GUI to p:CN=SAPServiceSBX@MYDOMAIN.LOCAL


Do you  also have the Secure Login Client installed? Please have a look where the environment variable SNC_LIB is pointing to.


Please also have a at look at the implementation guide



Regards Thomas