Hi Samuli Kaski ,
I have the same issue (GSS-API(maj): No credentials were supplied Unable to establish the security).
sapgenpse seclogin -l doesn't display the userPrincipal Name whereas I used the command below to generate pse :
sapgenpse keytab -p SAPSNCSKERB.pse -X <UPN password> -a <UPN>
#############################################################################
License Disclaimer SAP NetWeaver Single Sign-On
You are about to configure trust for single sign-on or SNC Client Encryption.
Please note that for single sign-on you require a license for
SAP NetWeaver Single Sign-On.
As exception, the usage of SNC Client Encryption only without SSO is free
as described in SAP Note 1643878.
#############################################################################
WARNING: it is recommended to use -y instead of -X
Please enter PSE PIN/Passphrase: **********
Please reenter PSE PIN/Passphrase: **********
!!! WARNING: For security reasons it is recommended to use a PIN/passphrase
!!! WARNING: which is at least 8 characters long and contains characters in
!!! WARNING: upper and lower case, numbers and non-alphanumeric symbols.
keytab: Created new keyTab entry.
keytab: KeyTab content stored:
Version Time stamp KeyType Kerberos name
1 Fri Mar 4 11:24:07 2016 DES <UPN>@domaine
1 Fri Mar 4 11:24:07 2016 AES128 <UPN>@domaine
1 Fri Mar 4 11:24:07 2016 AES256 <UPN>@domaine
1 Fri Mar 4 11:24:07 2016 RC4 <UPN>@domaine
keytab: Created PSE /usr/sap/<SID>/DVEBMGS00/sec/SAPSNCSKERB.pse.
sapgenpse seclogin -p SAPSNCSKERB.pse -O <sidadm>
sapgenpse seclogin -l
running seclogin with USER="<sidadm>"
0 (LPS:OFF):
(LPS:OFF): /usr/sap/<SID>/DVEBMGS00/sec/SAPSNCSKERB.pse
1 (LPS:OFF): CN=<UPN>@domaine
(LPS:OFF): /usr/sap/<SID>/DVEBMGS00/sec/SAPSNCS.pse
2 (LPS:OFF):
(LPS:OFF): /usr/sap/<SID/DVEBMGS00/sec/SAPSNCSKERB.pse
3 readable SSO-Credentials available
I don't have any CN for SAPSNCSKERB.pse
Could you help me?
Regards
GSS-API(maj): No credentials were supplied Unable to establish the security