Skip to Content
avatar image
Former Member

The verification of the Kerberos ticket failed


Hi Gurus!

i am trying to implement ss0 3.0.

I have done all the configurations i need to do from AD to pse to keytab.

i keep getting the attached error after setting up SNC on sap logon.

Can anyone help?

What am i doing wrong?



error-keb.png (19.7 kB)
Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • avatar image
    Former Member
    Nov 15, 2016 at 08:49 AM

    Hi Lola,

    You have got a ticket from the Service Principal Name configured in your AD and the verification of this ticket with the keytab created on ABAP side failed. You can enable CommonCryptoLib traces on ABAP side using the troubleshooting part of the SAP note 1848999, repeat you issue and check the traces. The following reasons can help you find out why:

    - Please check, that the password used to create the keytab is the service account password. Check that you did not copy/paste the password because some specials characters in the password are not well copied. You should enter the password manually.

    - Please check, that you use the right spelling of your service account Principal to configure your keytap. This muss look like <sAMAccountName>@<W2K-DOMAIN-NAME-IN-CAPITAL-LETTERS>, where the sAMAccountName is case sensitive.

    - Please check, that you configure the right encryption algorithm to create the keytab.

    If all those hints, did not help, please create a ticket with the CommonCryptoLib traces.



    Add comment
    10|10000 characters needed characters exceeded