Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

SPNego: Unable to acquire GSS credentials for at least one Kerberos realm

Former Member
0 Kudos

Hello Experts,

I am using SAP NW portal 7.0 with SPS15. Datasource is configured as MS ADS. We have successfully configured SSO. with backend R/3 system.

We have also configured SPNego. But while login into system, it gives following error.

ervices.security.authentication.logincontext#Guest#0##n/a##efe85c50305c11ddbe8d001b789fd1cd#Thread[Thread-545,5,SAPEngine_Appli

cation_Thread[impl:3]_Group]##0#0#Info#1#com.sap.engine.services.security.authentication.logincontext#Plain###LOGIN.FAILED

User: N/A

Authentication Stack: com.sun.security.jgss.accept

Login Module Flag Initialize Login Commit Abort

Details

1. com.sun.security.auth.module.Krb5LoginModule OPTIONAL ok exception false

Receive timed out#

#1.#001B789FD1CD00750000000C0000124800044EA77C70E262#1212381161119#/System/Security/Authentication#sap.com/irj#com.sap.engine.s

ervices.security.authentication.logincontext#Guest#0##n/a##efe88360305c11dd8b49001b789fd1cd#SAPEngine_Application_Thread[impl:3

]_31##0#0#Info#1#com.sap.engine.services.security.authentication.logincontext#Plain###LOGIN.FAILED

User: N/A

Authentication Stack: ticket

Login Module Flag Initialize Login Commit Abort

Details

1. com.sap.security.core.server.jaas.EvaluateTicketLoginModule SUFFICIENT ok false true

2. com.sap.security.core.server.jaas.SPNegoLoginModule REQUISITE ok exception true

Unable to acquire GSS credentials for at least one Kerberos realm

3. com.sap.security.core.server.jaas.CreateTicketLoginModule REQUISITE ok true

#

#1.#001B789FD1CD005F00005CB70000124800044EA77CFDF792#1212381170365#/System/Security/Audit/J2EE#sap.com/irj#com.sap.engine.servi

ces.security.roles.SecurityRoleImpl#Guest#23820##n/a##c334cc502e3311dd9431001b789fd1cd#Thread[Thread-57,5,SAPEngine_Application

Have anyone faced this issue?

kindly help.

regards,

1 REPLY 1

Former Member
0 Kudos

Hello,

I see that the Kerberos Client/Server Session Ticket for the AS Java from the KDC is not received by the SPNegoLoginModule.

Please check if you have the right version of the JVM.

Please check this [Link|http://help.sap.com/saphelp_nw04s/helpdata/en/43/4bd58c6c5e5f34e10000000a1553f6/frameset.htm] for further details.

Regards,

Srihari