Skip to Content
0
Former Member
Mar 19, 2015 at 11:34 AM

BW SSO2 and BO

89 Views

Hi experts,

we have implemented SSO2 in our BW system and its working fine. The problem is on our BO (4.1, SP3). when i start a webi report, using the scheduling, we always receive the error message:

Database error: Unable to connect to SAP BW server Incomplete logon data.. (IES 10901)


I've read 1 million notes, but till now, no luck. I saw the light after reading this treath:



but no luck. even after deploying gx64krb5.dll, in our BO server (CMC and SNC_LIB) we still have the same error.


I have this parameters on BW side:


profile:


spnego/krbspnego /usr/sap/XXX/SLL/libsapcrypto.so

spnego/krbspnego_lib /usr/sap/XXX/SLL/libsapcrypto.so

spnego/enable 1

snc/force_login_screen 0

snc/r3int_rfc_secure 0

snc/r3int_rfc_qop 8

snc/data_protection/use 3

login/password_max_idle_productive 120

login/min_password_lowercase 1

login/min_password_uppercase 1

login/password_compliance_to_current_policy 1

snc/permit_insecure_start 1

ssf/name SAPSECULIB

snc/identity/as p:CN=SAP/KerberosXXX@XXXXXXXXXXXXXXXXXXXX

snc/enable 1

snc/data_protection/min 2

SNC0 - its GREEN

strust and strustsso2 - certificates of (BO server) are in, with both clients (000 and 100)

BO user has the correct permissions and SNC is activated with SNC DATA (GREEN)

BO SIDE:

CMC:

Entitlement Systems : ok

role import: ok

SNC settings:

Enable Secure Network Communication [SNC] - checked

Prevent insecure incoming RFC connections - checked

SNC library settings : C:\sapcrypto\gx64krb5.dll

SNC name of SAP system: p:CN=SAP/KerberosXXX@XXXXXXXXXXXXXXXXXXXX

SNC name of Enterprise system : p:CN=XX, OU =XXX, O=XXX, L=XXXXXXXXX, C=XX


OPTIONS:


SAP SSO Service : Keystore was uploaded


OS:


SNC_LIB environment variable to point to C:\sapcrypto\gx64krb5.dll



Please help



thx in advance

Nuno