Skip to Content
0
Jun 04, 2008 at 11:30 AM

SPNego Implimentation Issue

37 Views

Hi

I am trying to configure SPNego to use SSO with Active Directory and I am seeing some problems that I am hope someone can help with please?

My SAP system is on x64 Windows 2003 Server SP2, and has NW 2004s with support stack 15. Active Directory is on a domain controller that is 32-bit Windows 2003 Server SP2.

First I configured the SAP Portal UME to use LDAP and ABAP. This seemed to work OK u2013 in SAP Portal I could see my Active Directory users, allocate permissions and then login to SAP Portal using an Active Directory user.

Next I ran the SPNego wizard and this did not give me any errors (although there is still some manual configurtion required). I can still log into the Portal using an ABAP user or an Active Directory user, but single sign-on does not work as there appears to be Kerberos errors.

I have run the SAP diagtool and I am getting the error: "KDC has no support for encryption type (14)".

Generally I have been using the following blog to configure and assess problems: https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/u/37611. [original link is broken] This blog is very good, but states that this error should not happen any more.

Has anyone come across this and resolved it? Or got any other suggestions?

Thanks

Al.