08-30-2009 9:29 AM
Hello,
we have implemented sapGUI SSO (kerberos + SNC).
we face a problem with login of users who Doesn't HAVE SNC tab
configured with "p:<username>@<...>".
is it possible somehow to get the normal login page (username/password) if SNC login fail ??
regards
avishay
08-30-2009 3:13 PM
Hi,
You need to:
1) Create another entry in saplogon.ini for the same system, but with SNC disabled. Then, use this to logon if SNC is not setup for the user.
2) Tell user to disable SNC in SAP Logon configuration and then try to logon again if they get an error.
3) Ensure that ALL users have an SNC name configured in USRACL table on each SAP system so that you won't get a logon failure like the one you describe.
Thanks,
Tim
08-30-2009 3:13 PM
Hi,
You need to:
1) Create another entry in saplogon.ini for the same system, but with SNC disabled. Then, use this to logon if SNC is not setup for the user.
2) Tell user to disable SNC in SAP Logon configuration and then try to logon again if they get an error.
3) Ensure that ALL users have an SNC name configured in USRACL table on each SAP system so that you won't get a logon failure like the one you describe.
Thanks,
Tim
08-31-2009 6:31 AM
hello tim, thanks
i know that using 2 saplogon.ini entries will workaround the problem, but we wish
the enterprise to MOVE to SNC , so it can't be done.
is there a way to get regular login after a SNC login failure ?
regards
avishay
08-31-2009 8:05 AM
Avishay,
If SNC is configured in saplogon.ini as the method of authentication, and the SNC logon fails then you get an error message to show you that SNC logon has failed (e.g. because users SNC name is not configured in USRACL table). There is no way to change this - if you want to logon without SNC then you need to use a saplogon.ini entry which does not have SNC enabled.
To migrate to SNC you need to setup all users in USRACL and then you won't get any logon failures as you enable users for the SSO experience.
Thanks,
Tim