Clik here to view.
Re: Different between SSO using X.509 and Kerberos
We don't intend to use this on other web applications except for web gui.From what I understood, we create 2 values for "servicePrincipalName" for the user in AD. One for SNC interface for Gui and the...
View ArticleRe: Different between SSO using X.509 and Kerberos
The setup of SPNs etc. is not the issue here. In order to have SPNEGO ABAP support for web applications (webgui is one) considering that you are on 7.02, you will need at least SP14 of SAP_BASIS or...
View ArticleRe: Failover configuration on SLS - how to set the Profile ID (GUID)?
Hi Kai, thanks for sharing this, for sure also valid approach to use NLB. Kind regards,Carsten
View ArticleRe: SAP NW 7.40 : SPNego authentication failed
Hello Chris, I am having the exact same problem, only the target stack is NW 7.31 instead of 7.4.Did you manage to solve this?If so, how?
View ArticleRe: SAP NW 7.40 : SPNego authentication failed
Hello, I had to re-import keytab generated with JDK 1.4.2 in SPNego wizard. Regards
View ArticleRe: SAP NW 7.40 : SPNego authentication failed
Hello Chris, Thanks for the prompt answer.In my system, when I added the SPNegoLoginModule and went to the SPNego tab I already found the "old" Realm configured.So what you did was to "Remove" that...
View ArticleRe: Different between SSO using X.509 and Kerberos
Ok so SAP_BASIS level SP14 and Kernel 7.21 Patch level 300 is required/recommended.Right now we are on 720_REL but are still not using 720_EXT. So when upgraded can we just go to 721_REL or is the...
View ArticleRe: Different between SSO using X.509 and Kerberos
The note says that PL 110 or higher is recommended so you can go to PL 300 directly. The EXT kernels are downward compatible meaning they are a safer choice then the standard (REL) kernels. Make sure...
View ArticleRe: SAP SSO between Microsoft AD and SAP R/3 GUI&WebGui
Hello Siri, Yes, the scenario with Web GUI Client requires SSL for the SSO implementation with certificates.You can install manyally the ComonCryptoLib but you have to make sure your company has the...
View ArticleRe: GSS-API(maj): No credentials were supplied Unable to establish the security
Hi All, I got my SSO working at my customer site. It turns out, the issue was,the network group were giving me a ‘domain’ name to use(bowieresources.com),that wasn’t a domain at all. It was a UPN...
View ArticleRe: Unable to log on to Secure Login Server - /slac
Hello, could you try the real url /webdynpro/resources/sap.com/securelogin.ui/Main instead of the short link? thanks best regards Alexander Gimbel
View ArticleMYSAPSSO2: ABAP backend shows empty SYSID and CLIENT
Hi, We are trying to generate SAP Assertion Tickets using the SSOEXT library from a java app, but our ABAP backend refuses our generated tickets. The ABAP backend is already configured to accept Logon...
View ArticleClik here to view.
Re: MYSAPSSO2: ABAP backend shows empty SYSID and CLIENT
Some more info on the same certificate being used in the system.pse, the ACL on client 001 and the java app. output of the sample SSOEXT ticket verification code shows the same certificate subject.
View ArticleAfter SNC Cursor is in the wrong position
Hello Guys, I´m Activating SNC on our SAP Servers. Windows and UNIX. Both work fine. But I have detect a small error I think. We are not using SSO only SNC. So when the logon screen appears the...
View ArticleRe: Single Sign-On with Kerberos
Hello Sam, SECUDIR="/usr/sap/users/sodadm/sec" (from HOME)please add the startprofile(s) SETENV_03 = SECUDIR=$(DIR_INSTANCE)/sec Note: if you do not have start profile then to instance profile...
View ArticleRe: Single Sign-On with Kerberos
Hi Guilherme,As suggested by you i recreated the keytab and the credentials and now i was able to start the application. Thanks for that. Now when i try to login i am gettin the message "No user exists...
View ArticleRe: Single Sign-On with Kerberos
Sam, You need to enter su01 and visit the SNC tab, change the SNC name, and save it. Then change it back, and save it again. Then it will work. The problem is that you enabled SNC after adding the SNC...
View ArticleRe: Single Sign-On with Kerberos
The SNC name is case sensitive. Did you enter it in SU01 exactly as it is shown in the error message including p: prefix ?
View ArticleRe: Single Sign-On with Kerberos
Yes, correclty said, that fixed the issue. Regards,Sam
View Article