SNC setup between SAP GUI and Application server

[Former Member]

Dear All

Have been given a task to setup SNC between SAP GUI and Application server,this requirement is to have an additional level of security .

Have gone through help link but failed to understand entirely..

http://help.sap.com/saphelp_nw70ehp2/helpdata/en/1f/b832a5e004472985d46721aaf43574/frameset.htm.

Refered SAP Note 66687 - Use of network security products ,Which says that third party security product software is required to acheive it,Can please tell me if anyody is using any software for SNC???

Also please give me the steps to be done on SAP GUI client side and on SAP application server side???

Appreciate any help..

Thanks

Edited by: Khaiserkm on Jun 30, 2011 8:01 AM

[tim_alsop]

Hi,

Your requirements are not 100% clear. In your message you say you are looking for SNC between SAP GUI and SAP ABAP, but the help page you posted a link for is not related to this, but explains how to use SNC for CPIC.

If you are looking to use SNC for authenticating users of SAP GUI to SAP ABAP, then you have a number of options. If your SAP ABAP server is on Windows then SAP have a library which can be obtained for no cost to give you basic SSO using Active Directory authentication (aka Kerberos). If your SAP application server is on Unix or Linux, then you can look on SAP EcoHub for third party SAP certified products which provide this functionality. SAP have also just launched a new product which has some functionality for SAP GUI SSO, but this is not free.

Please let me know if you have any more questions or need clarification.

Thanks,

Tim

[Former Member]

Thanks Tim,

Was looking for SNC between SAP Gui and ABAP,Abap server is on AIX.Will check the below link for Certified Product and come back .

http://www.sap.com/softwarepartner

https://www.sdn.sap.com/irj/sdn/security

under Partners -> Certified Security Partners

Meanwhile is it possible for you to give the steps ,exactly what steps on client side(SAP gui) and on ABAP side please.

Thanks

Edited by: Khaiserkm on Jun 30, 2011 10:05 AM

[tim_alsop]

Hi,

Instead of the links you refer to, I suggest you visit SAP EcoHub and search for SNC and Kerberos. On EcoHub you can see reviews from existing customers, which is better than just looking at company names of partners.

One solution to meet your needs is described at http://ecohub.sap.com/catalog/#!solution:trustbrokersecureclient and a demo is provided showing how to install the product, so this might answer your question about client side install. In fact, client side is just a matter of installing a package and changing entries in saplogon.ini using SAP Logon or editing saplogon.ini file.

Thanks,

Tim

[Former Member]

Also you can use 3rd partty tools like quest but they charge. On SAP side you need to set some profile parameters

snc/enable=1 (activates snc)

Also for all users you need to update SNC Name in SNC tab of SU01 with your AD/LDAP logon name including domain name

[tim_alsop]

Also you can use 3rd partty tools like quest but they charge. On SAP side you need to set some profile parameters

Actually, ALL of the solutions/tools available cost money, unless you develop your own crypto library and then you have to support it yourself

snc/enable=1 (activates snc)

There are about 8 or 9 snc related parameters which are recommended. This is just one of them. In fact this is the one which turns snc off or on but others are required to configure snc usage.