Skip to Content
0
Former Member
Jan 30, 2009 at 08:38 PM

GUI SNC logon failing intermittently with sec_avail="false" messages

565 Views

Greetings All,

We are using SAPGUI SNC logon with the GSSKRB5.DLL library as described in Note 352295.

Occassionally, users get this message when trying to access any system via SNC logon:

: 'SNCERR_GSSAPI 
An operation failed at the GSS-API level 
sec_avail="false" 

Time Thu Oct 09 14:07:49 2008 
Component SNC (Secure Network Communication) 
Release 710 
Version 5 
Module sncxx.c 
Method SncInit 
Return Code -4 
Counter 2

Activating a trace in the GUI will show this error message in the sapni_*.trc file:

*** ERROR => SncPAcquireCred()==SNCERR_GSSAPI  [sncxxall.c 1428] 
      GSS-API(maj): No valid credentials provided (or available) 
      GSS-API(min): No Kerberos SSPI credentials available for requested name 
    Could't acquire DEFAULT INITIATING credentials 

*** ERROR => ErrISetSys: error info too large [err.c ;       944] 
Thu Oct 09 14:07:27 2008 
LOCATION     
ERROR       GSS-API(maj): No valid credentials provided (or available) 
GSS-API(min): No Kerberos SSPI credentials available for requested nam 
Could't acquire DEFAULT INITIATING credentials 

TIME        Thu Oct 09 14:07:27 2008 
RELEASE     710 
COMPONENT   SNC (Secure Network Communication) 
VERSION     5 
RC          -4 
MODULE      sncxxall.c 
LINE        1428 
DETAIL      SncPAcquireCred 
SYSTEM CALL gss_acquire_cred 
ERRNO        
ERRNO TEXT   
DESCR MSG NO 
DESCR VARGS GSS-API(maj): No valid credentials provided (or available);;;; 
;;;;GSS-API(min): No Kerberos SSPI credentials available for requested nam;;;; 
;;;;Could't acquire DEFAULT INITIATING credentials 

DETAIL MSG N 
DETAIL VARGS 
COUNTER     1 
SncInit(): Fatal -- Initiating Credentials not available! 
<<- ERROR: SncInit()==SNCERR_GSSAPI 
         sec_avail = "false" 
*** ERROR => TmConnect2: SncInit (SNCERR_GSSAPI) [dpxxtm.c ;    833]

I am not able to isolate why some users encounter this problem. They may be able to access systems fine at one point, and then an hour later, they will start recieving the errors above. Logging off and back on to the computer will fix the problem, although waiting long enough (maybe the next day) will usually result in the problem going away. The problem will usually occur again in a few days or weeks. Some users never have the problem. I cannot locate any error on the SAP application server side, which is understandable since the GUI error indicates that initiating credentials could not even be acquired.

The issue appears with version 1.0.8 and 1.0.9 of the gsskrb5.dll. The client computers are all Windows XP SP2 and include the fix mentioned in Microsoft Hotfix 885887.

I would greatly appreciate any help in troubleshooting this issue.

Regards,

Zac Elliott