libgssapi_krb5.a Kerberos SAP AIX
marc twain
tab2752 at yahoo.fr
Mon Jul 5 04:52:11 EDT 2004
Hi !
We are trying to configure SNC in
heterogeneous environment: SAP
application server (AIX 4.3.3) and
frontends on Windows 2000 & XP
platforms in order to use only the
SSO functionalities. we have decided
to implement the SAP GSS-API
supported solution : Kerberso. So we
have installed a Kerberos client on
our application server and a
Kerberos domain controller on
Windows 2000 server. The Kerberos
client
works fine, but we get a problem
with the gss-api libgssapi_krb5.a.
When we put the libgssapi_krb5.ain
the kernel directory ( .../exe/run)
and activating the SNC parameters in
the instance profile, the sap
systems starts but it does not allow
any connection to the system. We
have noticed that the work processes
at the operating level are not
started.
Notice:
- The library has all the necessary
authorisations.
- When we tried with an AIX 5.2
platform we got the message :
B db_con_shm_ini: WP_ID =12, WP_CNT
=
39
M rdisp/reinitialize_code_page :0 ->
0
N SncInit(): found
snc/data_protection/max=1, using 1
(Authentication
Level)
N SncInit(): found
snc/data_protection/min=1, using 1
(Authentication
Level)
N SncInit(): found
snc/data_protection/use=1, using 1
(Authentication
Level)
N SncInit(): found
snc/gssapi_lib=/usr/sap/UP1/SYS/exe/
run/libgssapi_krb5.a
M ***ERROR => DlLoadLib: #0509-022
Cannot load
module
/usr/sap/UP1/SYS/exe/run/libgssapi_k
rb5.a.
#0509-124 The program is a
discontinued 64-bit object file. ->
DLENOACCESS (8,Cannot run a file
that does not have a valid format.)
[dlux.c
N *** ERROR =>
SncPDLInit():DlLoadLib
("/usr/sap/UP1/SYS/exe/run/libgssapi
_krb5.a")=DLENOACCESS [sncxxdl.c
342]
N *** ERROR =>
SncPDLInit()==SNCERR_INIT, Adapter
(#0)
/usr/sap/UP1/SYS/exe/run/libgssapi_k
rb5.a not
loaded
N [sncxxdl.0613]<<- SncInit()
==SNCERR_INIT
N sec_avail
= "false"
M ***LOG R19=> ThSncInit, SncInit (
SNC-000001) [thxxsnc.c
219]
M *** ERROR => ThSncInit: SncInit
(SNCERR_INIT) [thxxsnc.c
221]
M in_ThErrHandle:
1
M *** ERROR => SncInit (step 1,
th_errno 44, action 3) [thxxhead.c
8139]
Best regards.
---------------------------------
Créez gratuitement votre Yahoo! Mail avec 100 Mo de stockage !
Créez votre Yahoo! Mail
Dialoguez en direct avec vos amis grâce à Yahoo! Messenger !!From news at ra.nrl.navy.mil Mon Jul 5 05:06:08 2004
Received: from fort-point-station.mit.edu (FORT-POINT-STATION.MIT.EDU
[18.7.7.76])
by pch.mit.edu (8.12.8p2/8.12.8) with ESMTP id i65968l1007872
for <kerberos at PCH.mit.edu>; Mon, 5 Jul 2004 05:06:08 -0400 (EDT)
Received: from ra.nrl.navy.mil (ra.nrl.navy.mil [132.250.1.121])
i65967iG024877
for <kerberos at MIT.EDU>; Mon, 5 Jul 2004 05:06:07 -0400 (EDT)
Received: (from news at localhost)
by ra.nrl.navy.mil (8.11.7p1+Sun/8.11.7) id i658xlF07721
for kerberos at MIT.EDU; Mon, 5 Jul 2004 04:59:48 -0400 (EDT)
From: Thomas Beneke <thomas.beneke at web.de>
X-Newsgroups: comp.protocols.kerberos
Date: Mon, 05 Jul 2004 10:59:43 +0200
Message-ID: <ccb5a3$hg6$1 at newsreader2.netcologne.de>
References: <OF34A92A40.6AA00751-ONC1256EC4.0048235C-C1256EC4.0048D6EF at sanofi-synthelabo.com>
To: kerberos at MIT.EDU
Subject: Re: Kerberos : loading libgssapi_krb5.a ... SAP
X-BeenThere: kerberos at mit.edu
X-Mailman-Version: 2.1
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Help: <mailto:kerberos-request at mit.edu?subject=help>
List-Post: <mailto:kerberos at mit.edu>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request at mit.edu?subject=subscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos>
List-Unsubscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request at mit.edu?subject=unsubscribe>
X-List-Received-Date: Mon, 05 Jul 2004 09:06:09 -0000
Arezki.Tabellout at sanofi-synthelabo.com wrote:
>
>
>
> Hi !
> I get a problem with the gss-api libgssapi_krb5.a.
> When we put the libgssapi_krb5.a in
> a SAP kernel directory ( .../exe/run)
> and activating the SNC parameters in
> the instance profile, the sap
> systems starts but it does not allow
> any connection to the system. I
> have noticed that the work processes
> at the operating level are not
> started. In the work
> process log i find :
>
> B db_con_shm_ini: WP_ID =12, WP_CNT
> =
> 39
>
> M rdisp/reinitialize_code_page :0 ->
> 0
>
> N SncInit(): found
> snc/data_protection/max=1, using 1
> (Authentication
> Level)
> N SncInit(): found
> snc/data_protection/min=1, using 1
> (Authentication
> Level)
> N SncInit(): found
> snc/data_protection/use=1, using 1
> (Authentication
> Level)
> N SncInit(): found
> snc/gssapi_lib=/usr/sap/UP1/SYS/exe/
> run/libgssapi_krb5.a
>
> M ***ERROR => DlLoadLib: #0509-022
> Cannot load
> module
> /usr/sap/UP1/SYS/exe/run/libgssapi_k
> rb5.a.
>
> #0509-124 The program is a
> discontinued 64-bit object file. ->
> DLENOACCESS (8,Cannot run a file
> that does not have a valid format.)
> [dlux.c
> N *** ERROR =>
> SncPDLInit():DlLoadLib
> ("/usr/sap/UP1/SYS/exe/run/libgssapi
> _krb5.a")=DLENOACCESS [sncxxdl.c
> 342]
> N *** ERROR =>
> SncPDLInit()==SNCERR_INIT, Adapter
> (#0)
> /usr/sap/UP1/SYS/exe/run/libgssapi_k
> rb5.a not
> loaded
> N [sncxxdl.0613]<<- SncInit()
> ==SNCERR_INIT
>
> N sec_avail
> = "false"
>
> M ***LOG R19=> ThSncInit, SncInit (
> SNC-000001) [thxxsnc.c
> 219]
>
> M *** ERROR => ThSncInit: SncInit
> (SNCERR_INIT) [thxxsnc.c
> 221]
>
> M in_ThErrHandle:
> 1
>
> M *** ERROR => SncInit (step 1,
> th_errno 44, action 3) [thxxhead.c
> 8139]
>
> M
>
>
>
>
> Thanks for your help !
> Arezki TABELLOUT.
>
>
> ----------------------------------------------------------
> Le présent message, ainsi que les pièces ou annexes qui s'y trouvent
> éventuellement jointes, s'adressent exclusivement à celles des personnes
> qu'ils désignent comme destinataires. Constituant de ce fait une
> correspondance privée à caractère confidentiel, leur contenu est protégé
> par le secret des correspondances émises, transmises ou reçues par la voie
> des télécommunications. Si ce message électronique vous est parvenu
> fortuitement, veuillez avoir l'obligeance de le détruire, puis d'en aviser
> l'expéditeur dans les meilleurs délais.
>
> The Information in this e-mail belongs to Sanofi-Synthelabo, is intended
> for the use of the individual or entity to which it is addressed, and may
> contain information that is privileged, confidential, or exempt from
> disclosure under applicable law. If you are not the intended recipient, you
> are hereby notified that any disclosure, copying, distribution, or use of,
> or reliance on, the contents of this e-mail is prohibited. If you have
> received this e-mail in error, please notify us immediately by replying
> back to the sending e-mail address, and delete this e-mail message from
> your computer.
> ----------------------------------------------------------
>
>
> ________________________________________________
> Kerberos mailing list Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
Hi Arezki,
I think you can't use the static library. Try the shared one.
Regards,
Thomas
More information about the Kerberos
mailing list