Dear All,
I have an issue with SSO configuration on ABAP.
I did search well on SCN and Google before posting here please
....
Scenario ...
Integration of SAP {ABAP} with LDAP Windows 2008 AD.
Executed command on AD server with Domain Admin
SETSPN -A SAPServiceSOL/mydomain.com MYDOMAIN\SAPServiceSOL
Steps followed on SAP server
Downloaded the win64sso.zip from OSS Note 352295 and copied file to C:\Windows\System32\ and C:\Windows\SysWOW64
Executed SAPSSO and vcredist_x64 {2005 & 2010} binaries on server
RZ10 profile parameter set
snc/enable = 1
snc/accept_insecure_cpic = 1
snc/accept_insecure_rfc = 1
snc/permit_insecure_start = 1
snc/gssapi_lib = C:\Windows\System32\gx64krb5.dll
snc/identity/as = p:SAPServiceSOL @ MYDOMAIN.COM
Environment Variable set on SAP Server
SNC_LIB" pointing to
"C:\Windows\System32\gx64krb5.dll".
After doing above configuration I restarted system but it gives
error and all work process & dispatched stopped. With below error trace
I did tried changing parameter “snc/identity/as = p:MYDOMAIN\SAPServiceSOL
“ but failed again
***********
immediate print option for implicitely closed spool requests is
disabled
N SncInit(): Initializing
Secure Network Communication (SNC)
N PC with Windows NT
(mt,ascii,SAP_UC/size_t/void* = 16/64/64)
N
GetUserName()="SAPServiceSOL"
NetWkstaUser="SAPServiceSOL"
N SncInit(): found snc/data_protection/max=3, using 3
(Privacy Level)
N SncInit(): found snc/data_protection/min=2, using 2
(Integrity Level)
N SncInit(): found snc/data_protection/use=9, using 3
(Privacy Level)
N SncInit(): found
snc/gssapi_lib=C:\Windows\System32\gx64krb5.dll
N File
"C:\Windows\System32\gx64krb5.dll" dynamically loaded as GSS-API v2
library.
N The internal Adapter
for the loaded GSS-API mechanism identifies as:
N Internal SNC-Adapter
(Rev 1.0) to Kerberos 5/GSS-API v2
N FileVersionInfo:
InternalName= GX64KRB5-Release, FileVersion= 1.0.11.2
N SncInit(): found snc/identity/as=p:MYDOMAIN\SAPServiceSOL
N *** ERROR =>
SncPAcquireCred()==SNCERR_GSSAPI
[sncxxall.c 1445]
N GSS-API(maj): No
valid credentials provided (or available)
N GSS-API(min):
SSPI::IniSctx#1()==Specified target is unknown or unreachable
N Could't acquire
ACCEPTING credentials for
N
N name="p:SAPServiceSOL@MYDOMAIN.COM"
N FATAL SNCERROR --
Accepting Credentials not available!
N *** ERROR =>
SncPAcquireCred()==SNCERR_GSSAPI
[sncxxall.c 1445]
N GSS-API(maj): No
valid credentials provided (or available)
N GSS-API(min):
SSPI u2u-problem: please add Service principal for own account
N Could't acquire
DEFAULT ACCEPTING credentials
N
N *** ERROR => (debug hint: no default acceptor cred
available)
N [sncxxpar.c 727]
N <<-
SncInit()==SNCERR_GSSAPI
N sec_avail =
"false"
M ***LOG R19=>
ThSncInit, SncInitU ( SNC-000004) [thxxsnc.c
238]
M *** ERROR =>
ThSncInit: SncInitU (SNCERR_GSSAPI) [thxxsnc.c 240]
M in_ThErrHandle: 1
M *** ERROR =>
SncInitU (step 1, th_errno 44, action 3, level 1) [thxxhead.c 11445]
M
***********
Please advise
Mohammad