Quantcast
Channel: SCN: Message List - SAP Single Sign-On
Viewing all articles
Browse latest Browse all 2732

Re: Kerberos token verify error

$
0
0

Hey Duy,

 

That's the thing about SSO, there are so many moving parts to this which makes it very difficult to troubleshoot.

 

Like you said, if SNC-SSO is still working to the SAPGUI, then at least you know the AD user-end of things is good.  check "klist" in you DOS prompt on your PC to see if the Kerberos token is coming across when you make the HTTP call.

 

it should be the FQDN in the service principle name.  Hostname.domain.com

 

so if you "fixed" the password in SPNEGO then i'm hoping you did the same when you created the sapgenpse keytab right?  what about the cred_v2 ?  do the PINs match?

 

Browser changes can screw you up to.  Check that in note 1732610.  The "trusted"  or local intranet sites loaded in IE can create an issue.  They did for me.  So you need to check to see if any of those hostnames / IPs match the ones you are trying to reach.

 

I still say it would be valuable to enable the OS tracing like I said before.

 

NICK


Viewing all articles
Browse latest Browse all 2732

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>