Skip to Content
0

The verification of the Kerberos ticket failed

Nov 11, 2016 at 10:03 AM

228

avatar image

error-keb.png

Hi Gurus!

i am trying to implement ss0 3.0.

I have done all the configurations i need to do from AD to pse to keytab.

i keep getting the attached error after setting up SNC on sap logon.

Can anyone help?

What am i doing wrong?

Thanks

Lola

error-keb.png (19.7 kB)
10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

1 Answer

Valerie Kouatchou-Sunou
Nov 15, 2016 at 08:49 AM
2

Hi Lola,

You have got a ticket from the Service Principal Name configured in your AD and the verification of this ticket with the keytab created on ABAP side failed. You can enable CommonCryptoLib traces on ABAP side using the troubleshooting part of the SAP note 1848999, repeat you issue and check the traces. The following reasons can help you find out why:

- Please check, that the password used to create the keytab is the service account password. Check that you did not copy/paste the password because some specials characters in the password are not well copied. You should enter the password manually.

- Please check, that you use the right spelling of your service account Principal to configure your keytap. This muss look like <sAMAccountName>@<W2K-DOMAIN-NAME-IN-CAPITAL-LETTERS>, where the sAMAccountName is case sensitive.

- Please check, that you configure the right encryption algorithm to create the keytab.

If all those hints, did not help, please create a ticket with the CommonCryptoLib traces.

KR

Valere

Share
10 |10000 characters needed characters left characters exceeded