Skip to Content
avatar image
Former Member

Connection with SNC not working (SSO 2.0)

Dear Community,

We've been working for many years with SSO on ABAP working fine using library gx64krb5.dll.

Since we ugraded to EHP7 for SAP ERP 6.0 (Stack 04) we would like to take the opportunity to also connect in SSO on ABAP web and JAVA.

I have have followed the implementation for SPNEGO on ABAP side on our SandBox as described in the videos http://scn.sap.com/docs/DOC-40178 but half success.

The good news is that the ABAP stack starts well, no shouting.

So we went from

snc/gssapi_lib = $(DIR_EXECUTABLE)\gx64krb5.dll

snc/identity/as = p:SAPServiceSBX@MYCOMPANY.NET

to

snc/gssapi_lib = $(DIR_INSTANCE)\SLL\sapcrypto.dll

snc/identity/as = p:SAPServiceSBX

(I replaced my company name with MYCOMPANY.NET)

The SAP GUI can connect without SNC

The bad news is that the SAP GUI does connect in SNC. The SNC filed up my previous connections automatically with p:CN=SAPServiceSBX.

But I am getting the following error message attached.

Can somebody help please ?

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • avatar image
    Former Member
    Oct 06, 2014 at 08:08 AM

    Hello Dan,

    try changing the parameter snc/identity/as to p:CN=SAPServiceSBX

    Regards,

    Thomas

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Hi Dan,

      I was in a hurry yesterday. Now a bit more precise answer.

      According to my experience the SNC-Name has to contain the domain name. So please try to change the parameter snc/identity/as and the SNC name in SAP GUI to p:CN=SAPServiceSBX@MYDOMAIN.LOCAL


      Do you  also have the Secure Login Client installed? Please have a look where the environment variable SNC_LIB is pointing to.


      Please also have a at look at the implementation guide



      Regards Thomas

  • avatar image
    Former Member
    Oct 07, 2014 at 06:54 AM

    Hi Dan,

    I would like to understand your use case. You wrote that you want to implement SPNego for ABAP.

    But your issue is related to SNC wiht SAP GUI. If you want to use SNC  with SAP GUI and use your windows authentication (kerberos ticket) for SNC connection you need a Secure Login Client on your client workstation. Did you have it installed? Your error message looks like you are using another component for SNC connection.

    Could you check on your client workstation where your SNC lib (SNC_LIB ) is pointing out?

    KR

    Valerie

    Add comment
    10|10000 characters needed characters exceeded