Problem With SSO in Windows 2003 Server

[mikaellayuk]

Dear Expert,

I try to implement SSO (single Sign-on) on my system using kerberos 5. I have followed all the instructions from SAP guide. But i have error when i try logon using SSO. The error is

SAP System MEssage:

Security Network Layer (SNC) Error

I have maintained environment variable value for SNC_LIB to gsskrb5.dll

My SAP Server is MS 2003 Server and My database is Oracle 10g.

I test this in my development system whose has 3 clients.

Thank You

[Former Member]

Hello M.A.L,

You can get more information about the real cause of the problem if you follow the steps of SAP note 495911. It's recommended to increase the security trace level of some dialog work processes and activate the audit log. After that, you should reproduce the problem and then look for the failed logon in the audit log. See the work process that processed the logon request and then check its trace file using ST11.

Regards,

Rafael

[mikaellayuk]

Dear Expert,

I traced the dev file and found error in my dev_w0 file, and you can see the error below:

• *** ERROR => SncPEstablishContext()==SNCERR_GSSAPI [sncxxall.c 3352]

GSS-API(maj): Miscellaneous Failure

GSS-API(min): SSPI: Logon attempt failed

Unable to establish the security context

<<- SncProcessInput()==SNCERR_GSSAPI

• ERROR => ThSncIn: SncProcessInput (SNCERR_GSSAPI) [thxxsnc.c 976]

• ERROR => ThSncIn: SncProcessInput [thxxsnc.c 981]

in_ThErrHandle: 1

• ERROR => ThSncIn: SncProcessInput (step 4, th_errno 44, action 1, level 1) [thxxhead.c 10283] *

Can you give me advise what should i do?

Regards,

MAL