Please HELP! configure SSO,get error "invalid host name for issuing cookie"

[Former Member]

http://sapd120:8000/sap/bc/gui/sap/its/webgui/

[Former Member]

Thank you, Srikishan for your kind reply. Here is more detailed information:

I am configuring the SSO from CRD system (AS ABAP) to DEV system (AS ABAP) (we are using

ITS) . I have done the below configuration, but still got the logon pop up windows for DEV system. Error is

u201CSSO logon not possible; invalid host name for issuing cookie

Choose "Logon" to continue A dialog box appears in which you can enter your user and password

No switch to HTTPS occurred, so it is not secure to send a passwordu201D

From httpwatch trace file , I can see the problem is when accessing DEV the url is using host name , not FQDN. But in both CRD and DEV, I have set

FQHN for parameter SAPLOCALHOSTFULL and FQHN for parameter icm/host_name_full and restart the two systems, still same problem. I even deleted parameter SAPLOCALHOSTFULL, but the FQDN for icm/host_name_full is still not picked up. This is really weird.

The below is the configuration that I have done:

In CRD and DEV.

1. Login/accept_sso2_ticket is set 1

Login/create sso2ticket is set 2

2. SAPLOCALHOST = xxxx

SAPFQDN = xxxxxxxxx.com

SAPLOCALHOSTFULL= $(SAPLOCALHOST).$(SAPFQDN)

icm/host_name_full = xxxx. xxxxxxxxx.com

3. the FQDN has set in /etc/hosts and DNS server.

4. in SMICM, showing FQDN.

Please help , why isn't the FQDN picked up? Thanks a lot!

Lily

Edited by: Lily Z on Dec 20, 2010 11:17 AM

[Former Member]

Hi Lily,

The SAP Note 654982 might be helpful to check the profile parameters and if the FQDN is in the accepted format.

As your are using HTTPS as well, Points 1 and 2 from the note would be valid.

Additionally, please see the dev_icm logs with maximum trace levels set for more details regarding the error.

Kindly check and let us know.

Regards,

Srikishan

[Former Member]

The problem is fixed. As we use ITS. need go to CRM syetm, TC: CRMS_IC_CROSS_SYS , under URL for ITS, put FQDN of ECC there.

Thanks.

Lily

[Former Member]

Hi,

In order to get a response, you would have to provide quite some more information regarding the issue you face.

Regards,

Srikishan