Re: NW-SSO with Kerberos - Recommendation for Multiple Application server & RAC
Hello Santosh, You can create only one Service Account but you have to create separate servicePrincipalName (SPN) for every instance following this example SAP/SAPService<SID> where the...
View ArticleRe: SPNEGO - sometimes still prompted for ICWEB login
Hey Alexander, thanks for responding! When you say "server traces" could you expand a bit on exactly what you mean? Thanks!NICK
View ArticleRe: SPNEGO - sometimes still prompted for ICWEB login
Hi Nick, The two places I can think of are the ICM log (should tell you if a certificate) is getting thrown out from the web tier, or at the work process level itself (dev_w* in the work directory)....
View ArticleRe: SPNEGO - sometimes still prompted for ICWEB login
Matt, Thanks for responding but I'd rather hear back from Alexander before rummaging through a ton of ICM log files. like you said, it's not easy to do any search when you don't even know what you are...
View ArticleRe: SPNEGO - sometimes still prompted for ICWEB login
Dear Matt, there are traces in ABAP directly for SPNego.See http://help.sap.com/download/sapsso/secure_login_impl_guide_en.pdf chapter 4.5.5.5.1. Start SPNego Configuration (transaction SPNEGO)2....
View ArticleClik here to view.
Re: Secure Login Server - LDAP Destination with multiple servers?
Thanks!! Except of the noticeable timeout, works like a charm
View ArticleClik here to view.
Re: NW-SSO with Kerberos - Recommendation for Multiple Application server & RAC
Hi Santosh,you asked for recommendation. My recommendation is to create a AD service account for any SID as well as Donka already correctly said, separate SPNs SAP/<ServiceAccount> for each...
View ArticleRe: SNC does not work on additional application servers
you are right, after creating the certs update snc/enable=1. It worked.
View ArticleRe: NW-SSO with Kerberos - Recommendation for Multiple Application server & RAC
Hi Donka and Carsten Thanks for your recommendation. 1. We have created Separate Service id and SPN ( SAP/Serviceacount<SID> for each Instance ( SID) 2. But My question is - Should we create...
View ArticleRe: NW-SSO with Kerberos - Recommendation for Multiple Application server & RAC
Hello Santosh, You can create one service account or several, both variants will work. In both cases, you have to make sure these accounts are not locked and this depends on you administrative...
View ArticleClik here to view.
Re: SPNEGO - sometimes still prompted for ICWEB login
Hey Alexander, This doesn't look fun or easy. I can get to that screen, would you say to do this knowing that it is the CRM_LOGON BSP that users are accessing? And this happens randomly, and could...
View ArticleRe: single sign on with kerberos
Hi Donka, We have created the OSS ticket but not getting any solution. Please help us. We are still getting same error Miscellaneous failure.A221021E: Server refuses kerberos key exchange Regards
View ArticleRe: single sign on with kerberos
Hello Ashy, Please, send me the ticket number to donka.dimitrova at sap.com. Regards,Donka Dimitrova
View ArticleRe: single sign on with kerberos
Hello Ashy, I see that colleagues are working on your ticked already. You have exchanged info with them and they already replied four times to you since 23rd of March. Seems you already have some...
View ArticleClik here to view.
Re: single sign on with kerberos
Hi Ashu,you did some strange things wherever. If you have time, try to proceed according to this checklist. Maybe it helps. Service Account in Active Directory☐Make sure, the account is not locked, has...
View ArticleSNC and SAPUILandscape.xml - Anything to consider?
Hi Experts, is there anything to consider after switching from saplogon.ini to the new SAPUILandscape.xml concept? We do have a customer using BEX-Analyzer. Since moving from SAPGui 730 (saplogon.ini)...
View ArticleRe: SPNEGO - sometimes still prompted for ICWEB login
Hi Nick, one thing first: this has nothing to do with SLC. SPNego will (should) do without SLC installed on the PC. SPNego is something between Browser, AD Domain Controller and SAP Backend. Did you...
View ArticleRe: SNC and SAPUILandscape.xml - Anything to consider?
Hi Carsten,SAP corrected a bug with 7.40. BEx uses RFC. Insecure RFC port is 33xx, secure (SNC based) RFC port is 48xx. For a long time Bex used insecure port 33xx for SNC based RFC connection.This was...
View Article