Error while setting up SSO using Windows Kerberos

[Former Member]

Hi Experts

I am trying to setup SSO using Windows Kerberos utility

Microsoft AD : windows 2008 R2

SAP : ECC 6.0 EHP 5

SAP GUI : 720

I am configuring it using the below link

http://help.sap.com/saphelp_nwpi711/helpdata/en/44/0ebf6c9b2b0d1ae10000000a114a6b/content.htm

But when i try to access the SAP server by GUI. I get below error.

Can anyone guide me if any other settings are missing as i didnot do anything other then the above link.

Kindly help !!

Warm Reagrds

SG

[AtulKumarJain]

Hi SG,

Please check

http://scn.sap.com/thread/3222921

check SAP Note No. 352295

138498    Single Sign-On Solutions

BR

Atul

[Former Member]

Hi Atul,

This Link is for AIX but we have Windows 2008 AD, Application Server is also Windows 2008 and the GUI is on Windows 7 machine.

Regards

SG

[Former Member]

What you are trying to do is part of the NetWeaver Single Sign-On, a separately licensed, product. Although it is possible with the Windows specific GSS-API library provided in SAP note 352295, you would be violating the license agreement.

[Former Member]

Hi Samuli,

When you say that this is voilating the SAP licensing agreement, is it somthing that we cannot use in our environment.

We have seen this technique being used for SSO.

Finally please let us know whether can we use this technique or not. Are we safe on auditing if we use this.

Please suggest.

Thanks!!!

SG

[Former Member]

My understanding is that the procedure described in SAP note 352295 will be seen as a violation of the license agreement between you and SAP. You will have to get licenses for NWSSO or a 3rd party product. See SAP note 1684886 for details. I wonder though why SAP note 352295 and the provided library is still accessible. Maybe or someone from can confirm my understanding in the matter.

https://service.sap.com/sap/support/notes/1684886