Re: Implementing Single Sign-On from .NET Application to SAP System, using...
You need to use Kerberos credentials of the user that are delegated to the .net server. Then the RFC connection string needs to include appropriate SNC parameters. You need an SNC library installed on...
View ArticleRe: Implementing Single Sign-On from .NET Application to SAP System, using...
Hi Tim,Yes we have Kerberos as Kerberos library = @"C:\Windows\SysWOW64\gsskrb5.dll" How we can configure RFC connection string to include these parameters. Do we need to implement them in as parameter...
View ArticleRe: Implementing Single Sign-On from .NET Application to SAP System, using...
Is the gsskrb5.dll being used on both ABAP system and on .net server ?
View ArticleSecure Login Client - Kerberos Token disappeared
Dear Colleagues,We are using Secure Login Kerberos Token for our SSO in the SAP GUI. SAP GUI Version is 7.30 Patch 5 and Secure Login is Version 2, Support Package 3, Patch level 2.In rare cases...
View ArticleRe: Secure Login Client - Kerberos Token disappeared
Hello Alexander One reason can be the lifetime of Kerberos token has crossed and it has been removed from the SLC. Thanks.Tapan
View ArticleRe: SSO via Apache Reverse Proxy
Hello Yuksel The domain of the user and FQDN of the server can be different. Thanks.Tapan
View ArticleRe: SSO via Apache Reverse Proxy
Thank you Goyal. We passed that part and stuck on Apache Reverse Proxy now. Since there is an Apache Reverse Proxy Server between clients and the Java or ABAP server the certificate is not transferred...
View ArticleRe: Implementing Single Sign-On from .NET Application to SAP System, using...
Hi Tim, SNC_MYNAME is optional. In many SNC implementations there exists only a single identity per PSE and then you can use anyway only the one that exists. Best regards,Markus
View ArticleRe: Implementing Single Sign-On from .NET Application to SAP System, using...
There is no PSE involved here - PSE is a proprietory file format used on NetWeaver servers, and not applicable to this discussion. Instead, we are talking about a .net application that has Kerberos...
View ArticleRe: Implementing Single Sign-On from .NET Application to SAP System, using...
HI Tim, I should have been more precise that I was referring to the PSE as an example. Well, anyway, if there is a default for an SNC implementation, it will be used, when not specifying the...
View ArticleRe: Implementing Single Sign-On from .NET Application to SAP System, using...
The SNC library being discussed here is called gsskrb5.dll and this library doesn't use the correct default principal name in a .net environment, so code needs to be developed that gets the principal...
View ArticleRe: Implementing Single Sign-On from .NET Application to SAP System, using...
So, using the sncgss##.dll libraries would for sure be simpler for Atul ... Best regards,Markus
View ArticleRe: Implementing Single Sign-On from .NET Application to SAP System, using...
Yes, I agree. For that he would have to purchase our product. He wants to get gsskrb5.dll instead, since this library is free.
View ArticleRe: Implementing Single Sign-On from .NET Application to SAP System, using...
Well, then I can understand that he tries with a free one. Best regards,Markus
View ArticleSecure Login Server and SSL Certificates
Dear All, I am trying to use an SSL certificate created in Secure Login Server (SSO 2.0) for an ABAP system.I have exported the the certificate as an PSE file and imported the certificate into the...
View ArticleRe: Secure Login Server and SSL Certificates
Hello Ridouan,Please, explain what do you mean by "the issuer will be removed as soon as I save the certificate into the SSL node" and if possible provide some screenshots.Best regards,Donka Dimitrova
View ArticleRe: Secure Login Server and SSL Certificates
Hello Donka, Thanks very much for your response. The certificate was created in and issued by the Root CA (Secure Login Server).I have exported the PSE file and imported the file into ABAP using...
View ArticleRe: (Kerberos Authentication) Windows AD id and SAP GUI id's are different
Hi Ch, so we try not to discuss license questions in SCN. This has to be done with the corresponding sales team. We would like to keep SCN a platform for technical questions and solutions. From a SAP...
View ArticleSAP Netweaver SSO 2.0 - keytab lifetime
Hi, just a short question. Do we need to update the keytab file ( SAPSNCSKERB.pse ) with ( crontab ) ../SLL/sapgenpse keytab -p SAPSNCSKERB.pse -a USER@DOMAIN.ORG -nopsegen -y " " like we have to do it...
View ArticleRe: SSO based on Kerberos Token
Hi, please check that the SECUDIR is set in the sidadm environment. greetingsoliver
View Article