[28290] in Kerberos
Re: SAP snc error with Kerberos5 and Active Directory
daemon@ATHENA.MIT.EDU (Labiner)
Wed Aug 22 19:00:10 2007
From: Labiner <labiner@gmail.com>
Date: Wed, 22 Aug 2007 22:54:53 -0000
Message-ID: <1187823293.463611.130000@m37g2000prh.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
In-Reply-To: <mailman.35.1187734008.11942.kerberos@mit.edu>
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi Zaphod,
Which DLL are you using for the gui? GSSKRB or SNCGSS?
What version of it?
Did you set the SNC_LIB parameter on the windows machine?
Is the snc name for the gui identican to the identity_as parameter in
the profile?
Cheers,
Slartibartfast
On Aug 21, 3:04 pm, "Zaphod Beeblebrox" <zapho...@hotmail.com> wrote:
> My company is deployingSAPon SLES10 (running on zSeries). We would like to
> use our existing Active Directory (on Windows server 2003) for single
> sign-on. I have configured theSAPapplication servers for SNC, including
> using the libgssapi_krb5.so library. I installed the gsskrb5.dll as
> sncgss32.dll in the client's windows system32 folder.
>
> I am inconsistently able to login toSAPwith single sign-on. Sometimes it
> works great, and other times I get an "snc error" popup and this in my
> application server's log:
>
> N Tue Aug 21 08:29:55 2007
> N *** ERROR => SncPEstablishContext()==SNCERR_GSSAPI [sncxxall.c 3352]
> N GSS-API(maj): Miscellaneous failure
> N GSS-API(min): Unknown code
> N Unable to establish the security context
> N <<- SncProcessInput()==SNCERR_GSSAPI
> M *** ERROR => ThSncIn: SncProcessInput (SNCERR_GSSAPI) [thxxsnc.c 976]
> M *** ERROR => ThSncIn: SncProcessInput [thxxsnc.c 981]
> M in_ThErrHandle: 1
> M *** ERROR => ThSncIn: SncProcessInput (step 4, th_errno 44, action 1,
> level 1) [thxxhead.c 10375]
>
> Is this something I can fix? Unknown code doesn't tell me much.SAPstates
> very clearly they won't help with kerberos5 problems, especially when the
> user store is in Active Directory. There are 3rd party products from vendors
> like CyberSafe that claim to work with kerberos5 and Active Directory
> integration, but I would prefer for what comes with SLES10 to just work for
> us. SLES10 installed the krb5 1.4.3 package.
>
> _________________________________________________________________
> Learn.Laugh.Share. Reallivemoms is right place!http://www.reallivemoms.com?ocid=TXT_TAGHM&loc=us
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
