Kerberos SSO

[Former Member]

Hi

I get the following error configuring the AS for kerberos sso:

SncInit():   found snc/identity/as=p:SAPServiceSID@<REALM>

N  *** ERROR => SncPAcquireCred()==SNCERR_GSSAPI  [sncxxall.c 1439]

N        GSS-API(maj): No valid credentials provided (or available)

N        GSS-API(min): SSPI u2u-problem: please add Service principal for own account

N      Could't acquire ACCEPTING credentials for

N 

N      name="p:SAPServiceSID@<REALM>"

Any ideas?

Abu Sarah

[Former Member · Accepted solution]

Hi ,

Please check the below link and perform as suggested.

http://scn.sap.com/message/3192322

Your issue is addressed in the above link.

Thanks and Regards,

Vimal

[Former Member · Accepted solution]

The normal settings for the SAP instance profile are:

snc/enable = 1

snc/gssapi_lib = C:\Windows\SysWOW64\gx64krb5.dll

snc/identity/as = p:sapserviceSID@MY_DOMAIN

Would I need to change

snc/identity/as = p:SAPServiceSID@MY_DOMAIN

to

snc/identity/as = SAPServiceSID@MY_DOMAIN

for the SPN.

[Former Member · Accepted solution]

Hello,

you need to check the keytab file generation in windows AD.

Thanks

[Former Member]

Hi,

Look for the SPNego Configuration Guide on SAP Service Marketplace and work through it step by step.    Notes 968191 and 994791 are a good place to start.

Regards,

Graham