cancel
Showing results for 
Search instead for 
Did you mean: 

SSO using AIX kerberos

Former Member
0 Kudos

Dears,

I would like to know if someone of you as alredy tryed to use the Aix kerberos to configure the SSO on Sap systems, using the configuration described in the pdf :

"Single Sign On for SAP NetWeaver Application Server (ABAP) on Power Systems" 

available on www.ibm.com/support/techdocs

I tryed once and despite the LDAP connection works, and everything seems to be ok,  the Sap system does not come up at all at startup.

The Sap support in this case can't help us not so much, as it's a configuration coming from IBM.

Any experience on it ?

regards

Accepted Solutions (0)

Answers (1)

Answers (1)

hemanth2
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hi,

Hope you are doing good.

Please do try again and attach the relevant info from the below files when the engine doesn't startup:

/usr/sap/<SID>/work/ dev*, std* and jvm*

/usr/sap/<SID>/JC<nr>/j2ee/cluster/server0/logs/default trace (latest).

and

/usr/sap/<SID>/JC<nr>/j2ee/cluster/dispatcher/logs/default trace(latest)

Also, can you let me know the SAP support message that you raised earlier?

Thank you and have a nice day :).

_____________

Kind Regards,

Hemanth

Former Member
0 Kudos

Thanks for the feedback.

Unfortunately I do not have the logs anymore.

But I can extract this from the Oss message that was opened:

.................

N *** ERROR => SncPAcquireCred()==SNCERR_GSSAPI [sncxxall.c 1439]

N

GSS-API(maj): Miscellaneous failure

N GSS-API(min): No credentials cache

found

N Could't acquire INITIATING credentials for

N

N

name="p:myhost@MYFULLDOMAIN."

N SncInit(): Fatal -- Initiating Credentials

not available!

N <<- SncInit()==SNCERR_GSSAPI

The error means that the user running the system could not get the

credentials required to start SNC. Unfortunately as the Kerberos

security library used to start SNC is not an SAP product therefore

we cannot know why the error occured (neither do we officially support

kerberos on unix platforms see note 150380).

.................

Did you know that document from IBM ?

Regards

blanca_serrano
Advisor
Advisor
0 Kudos

Hello Roberto,

IBM seems to have published some information how to configure SAP Netweaver AS ABAP, google for "SSOforSAPNWASABAPonPower.pdf".

I hope this helps you.

Regards,

Blanca

Former Member
0 Kudos

Hi Blanca,

your document it's exactly the pdf we followed.

Did you try to put it place ?

Regards