Skip to Content
avatar image
Former Member

SPNego authentication mode on WAS with ABAP stack

Hi,

I have a Netweaver 2004 installation (java and abap stack). Now I want to configure the SPNego authentication mode on the java stack. Till now, the java stack uses the abap backend to authenticate the users.

Is there a possibility to change the authentication mechanism to spnego? Would there be the possibility on Netweaver 2004s?

Thanks,

Thomas

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • avatar image
    Former Member
    Jan 24, 2008 at 11:59 AM

    Hi Thomas

    You are a bit short on details, i assume you have a windows active domain and you are trying to set up single sign on to your java stack.

    In this case you can still use the abap ume and configure SSO with SPNego. If your browser can negotiate a kerberos ticket, and your java stack accepts it, you will be fine. However, you will not be able to authenticate users directly from kerberos to ABAP.

    If your windows domain usernames do not match with the SAP usernames, you will have to map them. In most cases the SAP username can be extracted from somewhere in the AD.

    Regards Michael

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jan 25, 2008 at 03:58 AM

    Thomas,

    With regard to your dual-stack, when installed, if they share the same SID (Java and ABAP were installed as a combined system), I am pretty sure that you cannot break this away from ABAP authentication. One way to tell is if you can goto the UME on the Java Stack, select Configuration, and then hit Modify Settings. Once the screen changes, select the drop-down - here for Dual-Stack, the only option should be ABAP.

    If this answers your question, please set the thread to answered.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Hi again

      Please ignore my post, i mixed the dual stack thing with the spnego, sorry.

      I only implemented spnego with a enterprise portal (no abap stack there). Additionally we added SS0 from that portal to various other SAP systems (saplogonticket) , which is not quite the thing you wanted.

      Kind regards, Michael