Secure login client is not working in VPN

[Former Member]

Hi,

We have scenario where users connect to office network though VPN and access SSO. When users connect through VPN, users are not able to login in SLC and hence not receiving X.509 user certificate. It shows the following error when try to login in SLC.

"There are currently no logon servers available to service the logon request"

But the same SLC is working when users connect directly (ex LAN or WI-FI) to the network.

We have enabled secure login client trace and found the below errors in the trace when user is connected through VPN.

SLC trace file

[2014.04.23 14:23:24.531][ERROR][sbus.exe            ][BASE        ][  6060] ERROR(0xA0100017) in CRYPT->sec_crypt_cipher_get_cipher_len(): An attribute is missing

[2014.04.23 14:23:39.578][WARN ][sbus.exe            ][Kerberos    ][  6056] Getting kerberos ticket for 'HTTP/ssodev' with algorithm 23 returned error

[2014.04.23 14:23:39.578][WARN ][sbus.exe            ][Kerberos    ][  6056]     0/C000005E There are currently no logon servers available to service the logon request.

[2014.04.23 14:23:39.578][WARN ][sbus.exe            ][Kerberos    ][  6056] Getting kerberos ticket for 'HTTP/ssodev' with algorithm  3 returned error

[2014.04.23 14:23:39.578][WARN ][sbus.exe            ][Kerberos    ][  6056]     0/C000005E There are currently no logon servers available to service the logon request.

[2014.04.23 14:23:39.578][WARN ][sbus.exe            ][Kerberos    ][  6056] Getting kerberos ticket for 'HTTP/ssodev' failed (user name is sap.helpdesk4@domain.companyresource.local)

[2014.04.23 14:23:39.578][ERROR][sbus.exe            ][Kerberos    ][  6056] ERROR(0xA2600202) in KERBEROS->sec_kerberos_clientGetTicket(): No Kerberos ticket for the requested service

[2014.04.23 14:23:39.578][ERROR][sbus.exe            ][Kerberos    ][  6056] ERROR(0xA2600202) in KERBEROS->sec_kerberos_spnego_CreateToken(): No Kerberos ticket for the requested service

[2014.04.23 14:23:39.578][WARN ][sbus.exe            ][Kerberos    ][  6056] Getting kerberos ticket for 'HTTP/ssodev@domain.companyresource.local' with algorithm 23 returned error

[2014.04.23 14:23:39.578][WARN ][sbus.exe            ][Kerberos    ][  6056]     0/C000005E There are currently no logon servers available to service the logon request.

[2014.04.23 14:23:39.578][WARN ][sbus.exe            ][Kerberos    ][  6056] Getting kerberos ticket for 'HTTP/ssodev@domain.companyresource.local' with algorithm  3 returned error

[2014.04.23 14:23:39.578][WARN ][sbus.exe            ][Kerberos    ][  6056]     0/C000005E There are currently no logon servers available to service the logon request.

[2014.04.23 14:23:39.578][WARN ][sbus.exe            ][Kerberos    ][  6056] Getting kerberos ticket for 'HTTP/ssodev@domain.companyresource.local' failed (user name is sap.helpdesk4@domain.companyresource.local)

[2014.04.23 14:23:39.578][ERROR][sbus.exe            ][Kerberos    ][  6056] ERROR(0xA2600202) in KERBEROS->sec_kerberos_clientGetTicket(): No Kerberos ticket for the requested service

[2014.04.23 14:23:39.578][ERROR][sbus.exe            ][Kerberos    ][  6056] ERROR(0xA2600202) in KERBEROS->sec_kerberos_spnego_CreateToken(): No Kerberos ticket for the requested service

[2014.04.23 14:28:38.171][TRACE][sbus.exe            ][sbusslogin.d][  6056] { CSecureLogin_Protocol_2_0::Send_DeleteSession

Anyone suggest us to fix this issue.

Regards,

Yogesh Kumar D

[manna_das]

Hello Yogesh,

Can you please give details how you establish SLC on WiFi?

Regards

[Former Member]

Hi Manna,

I have not configured any specific steps for WiFi. When we connected our laptops to office WiFi, SLC  started receiving certificates.

Regards,

Yogesh Kumar D

[former_member200373]

Yogesh,

what happens if you do a "Log In..." from the Kerberos profile´s context menu?

-- Stephan

[manna_das]

Thanks a lot for replying Yogesh

[Former Member]

Hello,

which kind of VPN do you use?

Does this guarantee full network access to the domain servers?
Is the VPN network IPv4 or IPv6 based?

thanks for the information

best regards

Alexander Gimbel