Hello World,
Now I have to setup SSO for SAPgui <-> ERP6.0 (like "make it happen yesterday" ;-)
I configured the MS Active Directory Service User, specified the Principle Name and configured settings in SPNEGO.
Installed SAPcrypto Lib on SAP Server and Secure Login Libs on Windows System (for Standard SAPgui).
Then I adjusted all SAP profile parameters and restarted SAP System.
All fine and well, but after I adjust settings in SAPgui SNC tab for the desired system and try to logon, I only get this error message:
> Specified target is unknown or unreachable
> p:CN=<AD-ServiceUserName>@<domain>.<name>
> Component: SNC
> Method: SndEstablishContext
> System Call: gss_init_sec_context
I replaced our server and domain names with placeholders, so don't be confused by the <...>
Our Windows Terminal Server is in the same domain as the Windows Kerberos Server, but our ERP systems are running on Linux and are not part of the Windows domain.
To be quite honest, I fail to see how the ERP server can reach the Kerberos server and I don't get how it is supposed to make its name/destination thus known to the world (-> snc/identity/as)
I pretty much followed this guideline when setting it all up: scn.sap.com/docs/DOC-40178
But it only refers to pure Windows environments, not a Windows (Client/MS-ActiveDir/Kerberos) & Linux (AS-ABAP) mix like we have.
Anybody can help out with this one?
Also, can I even install the SNC library into a standard SAPgui for SSO, or do I need to download the special SAP Secure Login Client for that (I know that one requires an extra license).