Skip to Content
0
Former Member
Dec 13, 2006 at 05:07 AM

Kerbros SSO Authentication

230 Views

Hello Everyone,

Server OS: Windows 2003 R2 SP1 x64 Enterprise Edition

Database: MS SQL 2005

ADS LDAP: Windows 2003

Client OS: Windows XP SP2

Browser: Internet Explorer Ver.6 SP2

SAP Version: NetWeaver 2004s SP9

JDK: j2sdk1.4.2_12-x64

I have configured Kerberos authentication for SSO using UME as datasource. All configuration have been verified to be correct.Following error is received on hitting the url http://<host>:<port>/irj and executing the diagtool as per note 958107 & 957666.

<b>Error creating GSS context.

[EXCEPTION]

GSSException: No valid credentials provided (Mechanism level: Attempt to obtain new ACCEPT credentials failed!)

at sun.security.jgss.krb5.Krb5AcceptCredential.getKeyFromSubject(Krb5AcceptCredential.java:189)

.......

........

Caused by: javax.security.auth.login.LoginException: java.lang.UnsatisfiedLinkError:</b>

I have refered following notes

994791 - SPNego Wizard (Primary Note)

Other notes referred

958107 - Using Diagtool for Troubleshooting Kerberos

957666 - Diagtool for Troubleshooting Security Configuration

935644 - Configuring Kerberos on NW04 against Database User Store

927350 - keytab generation for Kerberos authentication with SPNego Note

While using the spnego wizard, it is able to resolve ads user id in UME database.

Also when portal url is hit, following log is generated

<b>LOGIN.FAILED

User: N/A

Authentication Stack: com.sun.security.jgss.accept

Login Module Flag Initialize Login Commit Abort Details

com.sun.security.auth.module.Krb5LoginModule REQUISITE ok exception false C:\j2sdk1.4.2_12-x64\jre\bin\w2k_lsa_auth.dll: %1 is not a valid Win32 application

com.sap.security.core.server.jaas.SPNegoMappingLoginModule REQUISITE ok true </b>

Kindly help me on this.

Thanks,

Anshul

Message was edited by:Anshul

Anshul Agarwal