Hi,
we are setting up SSO for ABAP system using kerberos. since SAP is runnin on Linux and AD is on 2008 R2.
created user principle in AD
Created service principle and assined to user
Exported key tab from AD
imported in Linux sever
created krb.conf
BUT when we execute the command/usr/bin/kinit -k -t /usr/sap/DEV/DVEBMGS10/sec/DEV.keytab SNCDEV/matsea.kdp.com@XXXXXXXXX
giving error message "Client not found in Kerberos database while initializing kadmin interface"
trace:
N *** ERROR => SncPEstablishContext()==SNCERR_GSSAPI [/bas/742_REL/sr 3364]
N GSS-API(maj): Unspecified GSS failure. Minor code may provide more information
N GSS-API(min): Message size is incompatible with encryption type
N Unable to establish the security context
N <<- SncProcessInput()==SNCERR_GSSAPI
M *** ERROR => ThSncIn: SncProcessInput (SNCERR_GSSAPI) for T1_U1018_M0 failed [thxxsnc.c 1141]
M {root-id=0050563300451ED5A1DAB5B8E19D6D2D}_{conn-id=00000000000000000000000000000000}_0
M *** ERROR => ThSncIn: SncProcessInput for T1_U1018_M0 [thxxsnc.c 1146]
M in_ThErrHandle: 1
M *** ERROR => ThSncIn: SncProcessInput (step TH_WORK_SYNC, thRc ERROR-SNC-OTHER ERROR IN SNC LAYER, action RELEASE_WP, level 1) [thxxhea
- d.c 2407]
M ThIErrHandle: set thRc ERROR-SNC-OTHER ERROR IN SNC LAYER for T1_U1018_M0
M
someone hlep in this, please
Thanks
Nani