I have a stand-alone portal system with an ABAP system as its UME. Both are ERP 6.0 EHP7 SPS01 on Windows 2008 R3 and MSSQL 2008 R2. The ABAP system is connected to our Active Directory with read-only authorization.
I have now configured the Java system to authenticate against Active Directory instead of the ABAP system according to the online documentation. If a user exists in both AD and SAP, the AD password is now used to successfully log into the portal. If the user doesn't exist in SAP, the portal authentication fails whether the user exists in AD or not. So far so good.
My problem is the case where the user exists in SAP, but not in AD. According to the documentation, the authentication should now be carried out against SAP only. But the session hangs up and eventually times out, regardless of whether the password is correct or not. I can't see anything in the ABAP or Java logs. Does anybody have seen this before or have an idea what to do to figure it out?