SPNego Authentication for JAVA stack

[Former Member]

Hi All,

We are configuring SPNego Authentication to SAP NW 7.4 portla and Windows AD.

SAP NW 7.4 is on SP08 in AIX 7.1 and Windows AD on Windows 2012 server. As described in help.sap.com documentation we have done below steps.

1. Created service user in Windows AD with no expire and no password change.

2. Created REALM as explained.

3. Created and configured SPNegoLoginModule in NWA.

But still we are not able to login to NW 7.4 with kerberos authentication. We found below errors and warnings in security troubleshooting wizard in NWA.

Error:

Invalid ticket endtime: 20150309155820Z

11:42:14:338 Error Guest HTTP Worker [@907185622],5,D... ....core.server.jaas.SPNegoLoginModule

Could not validate SPNEGO token.

Warnig:

Can't map exception.

[EXCEPTION] com.sap.engine.services.security.exceptions.BaseLoginException: Cannot authenticate the user.

Kindly Suggest,

Regards,

Sree

[former_member188433]

Hi Sree - I am seeing the same error.  Were you able to correct your issue?  If so can you pass along any details?

Thanks - Jeff

[Former Member]

Dear Sree,

Check timezone and time settings first on EP and backend / AD.

Regards,

Adrian