Portal SSO Error To Active Directory

[Former Member]

Hi Experts?

We are configuring Portal 7.0 [single sign on] to Microsoft Active Directory [AD].

From the web_diagtool - the following error message shows:

-

---

security.authentication.loginmodule.spnego Couldn't find user by attribute krb5principalname = J2EE-EPQ-MBSXXXXX.NET

loginmodule.spnego.SPNegoLoginModule

Acquiring credentials for realm DURDC1.SAPREF.NET failed

[EXCEPTION]

GSSException: No valid credentials provided (Mechanism level: Attempt to obtain new ACCEPT credentials failed!)

Caused by: com.sap.engine.services.security.exceptions.BaseLoginException: Access Denied.

Caused by: com.sap.security.core.server.jaas.spnego.SPNegoProtocolException: User Resolution not possible.

-

---

We have created the respective AD service user account.

Also we have successfully done the connection and authentication tests with Config Tool.

Thanks in advance

Regards,

B

Edited by: Brandon Chetty on Dec 22, 2009 1:03 PM

Edited by: Brandon Chetty on Dec 22, 2009 1:13 PM

[Former Member]

Hi,

maybe the notes of the following blog will help you to resolve the issue...?

/people/gerd.schuster/blog/2009/11/30/configuring-spnego-authentication-on-sap-bi70-webas-java

Gerd

[Former Member]

Hi Gerd?

Sure thanks - will give it a try now.

Much appreciated!

Regards,

Brandon