Skip to Content
avatar image
Former Member

GSS-API(maj): Miscellaneous Failure

Hi dear SAP Forum,

After Configured SNC Kerberos we have this problem on Client Side

Sapgui 750 [Build 9057] Tue Feb 06 15:30:17 2018
GSS-API(maj): Miscellaneous Failure
GSS-API(min): SSPI::IniSctx#1()==Specified target is unknown or unreac
target="p:CN=<SID>@<Domain Name"

Tx. SNCCONFIG :

Default SNC Identity

p:CN=<SID>

SNC State = Active

PARAMETERS:

snc/accept_insecure_cpic = 1

snc/accept_insecure_gui = 1

snc/accept_insecure_r3int_rfc = 1

snc/accept_insecure_rfc = 1

snc/accept_insecure_rfc = 1

snc/data_protection/max = 3

snc/data_protection/min = 2

snc/data_protection/use = 3

snc/enable = 1

snc/extid_login_diag = 1

snc/extid_login_rfc = 1

snc/force_login_screen = 0

snc/gssapi_lib = /usr/sap/ /SYS/exe/run/ libsapcrypto.so

snc/identity/as = <SID>

snc/only_encrypted_gui = 0

snc/only_encrypted_rfc = 0

snc/permit_insecure_start= 1

snc/r3int_rfc_qop = 8

snc/r3int_rfc_secure = 0

spnego/construct_SNC_name = 111

spnego/enable = 1

spnego/krbspnego_lib = /usr/sap/ /SYS/exe/run/ libsapcrypto.so

Thanks in advance

Cheers

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • avatar image
    Former Member
    Feb 06 at 09:02 PM

    We are following this post:

    https://wiki.scn.sap.com/wiki/display/Security/Miscellaneous+failure+Error+in+SNC

    Verify if Kerberos token is displayed in Secure Login Client Console.

    Q: We don't have Secure Login Client Console installed because this product needs a license

    Verify if the security token (Kerberos or certificate) is used.

    1. Try with the option Use Profile for SAP Applications if the desired profile is used.
    2. Q: Where can I set this option?

    Verify if the environment variable SNC_LIB is configured to use sapcrypto.dll.

    SNC_LIB (on the PC Syde) =

    SNC_LIB=gsskrb5.dll

    Thanks in Advance

    Add comment
    10|10000 characters needed characters exceeded