GSS-API(maj): Miscellaneous Failure

[Former Member]

Hi.

I configured the Single Sign-On with Microsoft Kerberos SSP between SAPGUI for windows and SAP WAS ABAP + JAVA(Local Installation).

The parameter "snc/identity/as" has the value: "p:prueba tsnetglobal.com". prueba is a domain user.

El use SAPServiceTGX is a local user.

But, the SAP System is stopped.

I get the following errors:

DEV_SERVER

*****************************************************************************

*

[Thr 1240] * LOCATION CPIC (TCP/IP) on local host with Unicode

[Thr 1240] * ERROR partner '172.16.6.104:sapgw01' not reached

[Thr 1240] *

• TIME Tue Aug 12 17:59:29 2008

[Thr 1240] * RELEASE 700

[Thr 1240] * COMPONENT NI (network interface)

[Thr 1240] * VERSION 38

[Thr 1240] * RC -10

[Thr 1240] * MODULE nixxi.cpp

[Thr 1240] * LINE 2823

[Thr 1240] * DETAIL NiPConnect2

[Thr 1240] * SYSTEM CALL connect

[Thr 1240] * ERRNO 10061

[Thr 1240] * ERRNO TEXT WSAECONNREFUSED: Connection refused

[Thr 1240] * COUNTER 1

[Thr 1240] *

[Thr 1240] *****************************************************************************

[Thr 2984] Tue Aug 12 17:59:30 2008

[Thr 2984] JLaunchIExitJava: exit hook is called (rc = -11113)

[Thr 2984] **********************************************************************

• ERROR => The Java VM terminated with a non-zero exit code.

• Please see SAP Note 943602 , section 'J2EE Engine exit codes'

• for additional information and trouble shooting.

**********************************************************************

[Thr 2984] JLaunchCloseProgram: good bye (exitcode = -11113)

DEV_W0

_SncInit(): Initializing Secure Network Communication (SNC)

N PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 16/32/32)

N SncInit(): found snc/data_protection/max=3, using 3 (Privacy Level)

N SncInit(): found snc/data_protection/min=1, using 1 (Authentication Level)

N SncInit(): found snc/data_protection/use=9, using 3 (Privacy Level)

N SncInit(): found snc/gssapi_lib=C:\WINDOWS\system32\gsskrb5.dll

N File "C:\WINDOWS\system32\gsskrb5.dll" dynamically loaded as GSS-API v2 library.

N *** ERROR => SncPDLInit(): gss_indicate_mechs() failed

N [sncxxdl.0457]*** ERROR => SncPDLInit(()==SNCERR_INIT [sncxxdl.c 452]

N GSS-API(maj): Miscellaneous Failure

N GSS-API(min): Kerberos SSPI not usable with this User account

N STOP! -- initial call to gss_indicate_mechs() failed

M *** ERROR => ErrISetSys: error info too large [err.c 944]

M Tue Aug 12 17:58:06 2008

M LOCATION SAP-Server tsnpesrv026_TGX_01 on host tsnpesrv026 (wp 0)

M ERROR GSS-API(maj): Miscellaneous Failure

M GSS-API(min): Kerberos SSPI not usable with this User account

M STOP! -- initial call to gss_indicate_mechs() failed

M TIME Tue Aug 12 17:58:06 2008

M RELEASE 700

M COMPONENT SNC (Secure Network Communication)

M VERSION 5

M RC -1

M MODULE sncxxdl.c

M LINE 452

M DETAIL SncPDLInit(

M SYSTEM CALL gss_indicate_mechs

M ERRNO

M ERRNO TEXT

M DESCR MSG NO

M DESCR VARGS GSS-API(maj): Miscellaneous Failure;;;;

M ;;;;GSS-API(min): Kerberos SSPI not usable with this User account;;;;

M ;;;;STOP! -- initial call to gss_indicate_mechs() failed

M DETAIL MSG N

M DETAIL VARGS

M COUNTER 1

N *** ERROR => SncPDLInit()==SNCERR_INIT, Adapter (#0) C:\WINDOWS\system32\gsskrb5.dll not loaded

N [sncxxdl.0604]<<- ERROR: SncInit()==SNCERR_INIT

N sec_avail = "false"

M ***LOG R19=> ThSncInit, SncInitU ( SNC-000001) [thxxsnc.c 230]

M *** ERROR => ThSncInit: SncInitU (SNCERR_INIT) [thxxsnc.c 232]

M in_ThErrHandle: 1

M *** ERROR => SncInitU (step 1, th_errno 44, action 3, level 1) [thxxhead.c 10468]

How can I solve the problem??.

Best regards.

Ticiano.

[tim_alsop]

Hi,

Kerberos realm names should be upper case, so instead of "p:prueba <at> tsnetglobal.com" you need to use "p:prueba <at> TSNETGLOBAL.COM" in your snc/identity/as param.

Thanks,

Tim

[Former Member]

Hi.

Thank for your help.

Best regards.

Ticiano.

[tim_alsop]

It's a pleasure. If you have any other issues, please open a new thread.