Quantcast
Channel: SCN: Message List - SAP Single Sign-On
Viewing all articles
Browse latest Browse all 2732

Re: Using Kerberos for SNC with Users in Different Domains

$
0
0

Hi Matthias,

 

From the traces file provided I could see that your issue happens because your client workstation did not get a ticket from the AD. Could you check if:

 

- You configure the SPN of your system account as server SNC Name in SAP GUI configuration and not the UPN.

 

- If the SPN exists in AD with the command "setspn -Q <your SPN>  e.g. setspn -Q SAP/ABCD. This command should be made in your ADS

 

- If the SPN you configure in SAP GUI with @DOMAIN is the domain of your client workstation. You can use the command "klist" on your client workstation to check all kerberos ticket provided.

 

KR

 

Valerie


Viewing all articles
Browse latest Browse all 2732

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>