Validation with Kerberos 5, SAP Linux, SNC for SSO

[azzedine.allouache@sanofi-aventis.com]

Hello,

I found your message about SAP, Kerberos and SSO.
We also try to install Signle Sign on for SAP with Kerberos and Active
Directory. We made the
installation on Unix with Kerberos.......but When SAP start, we have error
without documementation.
IBM says that the problem come from SAP and SAP told us to wee with our
Operating system Vendor (IBM)



Did you solved your problem ?
We are interesting to know if it can Works.


Regards

Azzédine Allouache

-------------------------------------------------------------------------------

Direction Opérations et Services
Département Expertises Techniques
Tel : +33.1.41.24.51.14     Fax : +33.1.41.24.76.25
Mobile : +33.6.62.51.11.72
e-mail: azzedine.allouache at sanofi-aventis.com
--------------------------------------------------------------------------------

Validation with Kerberos 5, SAP Linux, SNC for SSO
JuanM eltoken02 at yahoo.com.ar
Mon Nov 1 23:44:32 EST 2004
      Previous message: Kadmin max connections
      Next message: problem setting up ssh-krb5 from Debian Sarge
      Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

We want to install Single Sign on functionality for SAP, with BC-SNC,
Kerberos 5 and Active
Directory, but when we configure SNC in SAP with kerberos we have a
validation error as soon as
start SAP.
Notice:
We have installed SAP over Linux which has Kerberos 5, the library that we
are using is
libgssapi_krb5.so.
The domain controllers of the AD are Windows 2003.

The configuration seems to be ok, we create the accounts in the AD (Linux
server account
“hostname” and SAP Service account “SAPServiceXXX”), however when SAP
starts we FIND the following
error:




----------------------------------------------------------
Le présent message ainsi que ses éventuelles pièces jointes est
exclusivement destiné au(x) destinataire(s), personnes physiques ou
morales, qu'il désigne.
Il constitue de ce fait une correspondance à caractère privé et peut
contenir des informations confidentielles.
Si ce message vous est parvenu par erreur, nous vous remercions d'en aviser
immédiatement l'expéditeur par retour de courrier électronique puis de le
détruire, ainsi que ses éventuelles pièces jointes, sans en conserver de
copie.


This message, including any attachment, is intended for the use of the
individual or entity to which it is addressed.
It is therefore to be considered as a private correspondence which may
contain confidential information.
If you are not the intended recipient, please advise the sender immediately
by reply e.mail and delete this message and any attachment thereto without
retaining a copy.
----------------------------------------------------------