SSO with Kerberos in AIX

[Former Member]

Hi:

I'm configuring SSO in a SAP system 4.7 with kerberos 1.3.1.

I have added the next parameters in my instance profile:

snc/enable = 1

snc/gssapi_lib = /usr/local/lib/libgssapi_krb5.a

snc/identity/as = p:desap/desap@METROVACESA.ES

snc/accept_insecure_cpic = 1

snc/accept_insecure_rfc = 1

snc/accept_insecure_gui = 1

snc/accept_insecure_r3int_rfc = 1

snc/data_protection/use = 3

snc/data_protection/min = 1

snc/data_protection/max = 3

snc/permit_insecure_start = 1

But when i try to restart my aplication server all work process die with this error:

N SncInit(): found snc/data_protection/max=3, using 3 (Privacy Level)

N SncInit(): found snc/data_protection/min=1, using 1 (Authentication Level)

N SncInit(): found snc/data_protection/use=3, using 3 (Privacy Level)

N SncInit(): found snc/gssapi_lib=/usr/local/lib/libgssapi_krb5.a

M *** ERROR => DlLoadLib: 0509-026 System error: Cannot run a file that do

es not have a valid format. -> DLENOACCESS (8,Exec format error) [dlux.c 2

46]

N *** ERROR => SncPDLInit(): DlLoadLib("/usr/local/lib/libgssapi_krb5.a")=DLENO

ACCESS

N *** ERROR => SncPDLInit()==SNCERR_INIT, Adapter (#0) /usr/local/lib/libgssapi

_krb5.a not loaded

N <<- SncInit()==SNCERR_INIT

N sec_avail = "false"

M ***LOG R19=> ThSncInit, SncInit ( SNC-000001)

M *** ERROR => ThSncInit: SncInit (SNCERR_INIT)

M in_ThErrHandle: 1

M *** ERROR => SncInit (step 1, th_errno 44, action 3)

Any idea?

thanks,

José Luis de la Mata

[Former Member]

Hi,

You probably need to use the shared libraries(ending with .so) instead of the static ones(ending with .a).

Get your sysadmin to install them.

Regards,

Martin Andersson