Quantcast
Channel: SCN: Message List - SAP Single Sign-On
Viewing all articles
Browse latest Browse all 2732

Re: GSS-API(maj) SAP SSO btw SAP on linux and MAD

$
0
0

Hi Amit,

 

You are using a quite old version of SLL and your configuration will lead to error even the command "snc status" seems to be OK.

 

Could you check if you can run the tcode sncwizard? If yes, please migrate your SLL 1.0 to the latest CCL like I wrote in my last post and configure your SNC keytab using the transaction spnego or kerberos. the Service Account UserID@DOMAIN should be use instead of the SPN (SAP/...).

If you cannot run the tcode sncwizard, please follow my instruction fro my last post:

 

-switch to the CommonCryptoLib (CCL) for your profile parameter snc/gssapi_lib

- The migration from SLL 1.0 to the CCL is explained in the implementation guide:http://help.sap.com/download/sapsso/secure_login_impl_guide_en.pdf chapter 4.4

To configure your keytab on the server please refer to the the SAP Note 1837595 and use the Service Account UserID@DOMAIN instead of the SPN (SAP/...).

 

In all cases, please configure your snc/identity/as= p:<your SAPCRYPTO Server PSE DName from strust >

 

KR

 

Valerie


Viewing all articles
Browse latest Browse all 2732

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>