Skip to Content
0
Sep 27, 2018 at 12:39 PM

SAProuter: How to cater for SSO using saprouter

472 Views Last edit Sep 28, 2018 at 04:31 AM 2 rev

Hi

We are trying to open a connection to a customer's SAP system by using SAProuter from the supplier to the client. The client is running SAP, and the supplier needs to read data from the client's SAP system.

Currently we get the error that credentials are missing.

The client has confirmed that they are using Active Directory with Kerberos for SSO, and it seems like SSO is at the source of this error. How do we cater for SSO using SAProuter? For now, we are just trying to get a successful niping test.

The error on the supplier side is:

*** ERROR => SncPEstablishContext() failed for target='p:CN=MyCertName' [D:/depot/b 3638]
*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI  [D:/depot/bas/74 3604]
      GSS-API(maj): Miscellaneous failure
      GSS-API(min): A2210210:Verification of own certificate by server failed
    Unable to establish the security context
    target="p:CN=MyCertName"
<<- SncProcessInput()==SNCERR_GSSAPI
*** ERROR => NiSncIProcIn: SncProcessInput failed (sncrc=-4;0000000845A9B490;97) [nisnc.c      1003]

The error on the client side (destination) is:

*** ERROR => SncPAcquireCred()==SNCERR_GSSAPI  [/bas/753_REL/sr 1465]
      GSS-API(maj): No credentials were supplied
    Could't acquire ACCEPTING credentials for
    name="p:CN=MyCertName"
<<- SncProcessInput()==SNCERR_GSSAPI
*** ERROR => NiSncIProcIn: SncProcessInput failed (sncrc=-4;0x1d17270;1761) [nisnc.c      1003]
*** ERROR => NiSncIProcOpcode: NiSncIProcIn failed (rc=-17) [nisnc.c      337]
*** ERROR => NiBufIIn: NiBufIProcMsg failed (rc=-17) [nibuf.cpp    2828]
*** ERROR => NiBufReceive C12/-1 '158.xx.x.xxx' failed (rc=-17) [nirout.cpp   3326]