on 01-28-2014 1:19 PM
Hi Experts
I have an error when i try to configer the SNC
1. I configured the SNC on server side
Determined $SECUDIR
Dowloaded crypto.dll
rz10
snc/gssapi_lib=C:\usr\sap\SER\DVEBMGS00\exe\gssapi32.dll
snc/enable=1
snc/accept_insecure_gui=1
snc/accept_insecure_rfc=1
snc/accept_insecure_cpic=1
snc/identity/as=p:CN=SAPSER, O=SAP731, C=RU
snc/permit_insecure_start = 1
after that i used a transaction strust, where I've created a System PSE and SNC SAPCryptolib sertificates.
2. I downloaded SNC_CLIENT_ENCRYPTION from SAP and installed it.
3. I configured connection to SAP
And when I try to connect i have an error:
So what I did wrong?
log: dev_w0
Thanks a lot..
Hello Sultan,
The reason for the issue is:
snc/gssapi_lib=C:\usr\sap\SER\DVEBMGS00\exe\gssapi32.dll
You're using a Kerberos dll and not the SNC Client Encryption as your SNC product. As per your settings, you've configured your snc/identity/as to work with SAPCryptolib PSE, but your SNC library is pointing to work with Kerberos tokens, so there is no valid credentials.
Therefore, please ensure to use the correctly SNC lib (SNC Client Encryption) by following the guide Donka mentioned.
Best Regards,
Guilherme de Oliveira
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Dear Sultan,
What scenario you are trying to implement?
Do you want to implement Single Sign-On with SCN or you would like to implement SNC Client Encryption for Password Logon only?
Best regards,
Donka Dimitrova
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Dear Donka Dimitrova ,
Implement SNC Client Encr for password logon only.
Dear Sultan,
You will find the instructions how to implement this scenario in the SAP Help: Using SNC Client Encryption for Password Logon.
Best regards,
Donka Dimitrova
have you gone through the note 1525059 - Analysis of Problems Accessing a PSE via Credentials
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Thanks Sunil Bujade
I've checked the emviroment variable, as you can see - all right.
The cred_v2 in the same directory.
User | Count |
---|---|
87 | |
10 | |
10 | |
10 | |
7 | |
6 | |
6 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.