[23427] in Kerberos
AW: Error in client with kerberos and SAP SSO
daemon@ATHENA.MIT.EDU (Barbat, Calin)
Mon Feb 21 06:07:25 2005
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Date: Mon, 21 Feb 2005 12:06:43 +0100
Message-ID: <7A05A249A3DE11459B154221006BDE6F03384D73@exc-mch01.mch.osram.de>
From: "Barbat, Calin" <c.barbat@osram.de>
To: "Juan Manuel Sestelo" <eltoken02@yahoo.com.ar>,
"Kerberos MIT" <kerberos@mit.edu>
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu
Hi Juan,
no, I didn't have this problem before, but I assume that it has to do with the life-time of the user credentials in AD. Could be that there is a configuration option to say "Infinite", or so.
Did you look in the MS site? Perhaps they have a solution. "LSA-Cache refresh" could be something to look after.
Have a nice day,
Calin.
-----Ursprüngliche Nachricht-----
Von: kerberos-bounces@mit.edu [mailto:kerberos-bounces@mit.edu]Im
Auftrag von Juan Manuel Sestelo
Gesendet: Freitag, 18. Februar 2005 16:25
An: Kerberos MIT
Betreff: Error in client with kerberos and SAP SSO
Hi,
I have implemented an SSO solution with kerberos5, SNC, Active Directory 2K3 with SAP(Unix
Server). It Works fine, but I found an error in some clients that I want to investigate.
Some days, in the morning (note: users don't close the windows sessions at the end of work-day,
they block-out their computers), when users try to connect to SAP, they receive the following
client error (in the SAP client log):
**************************************************
Sapgui 620 [Build 8966] Wed Feb 16 10:03:14 2005: 'GSS-API(maj): No valid credentials provided (or
available) GSS-API(min): No Kerberos SSPI credentials available for requested nam
name="p:user@SITE.DOMAIN.COM"
Component SNC (Secure Network Communication)
Release 620
Version 5
Module sncxxall.c
Line 1223
Method SncPAcquireCred
Return Code -4
System Call gss_acquire_cred
Counter 4
**************************************************
or this one:
**************************************************
Sapgui 620 [Build 8966] Tue Feb 15 10:21:59 2005 : 'SNCERR_GSSAPI
An operation failed at the GSS-API level sec_avail="false"
Component SNC (Secure Network Communication)
Release 620
Version 5
Module sncxx.c
Method SncInit
Return Code -4
Counter 2
**************************************************
The problem ends if the user close it windows session and start it again.
Someone knows this error?
Thanks in advance!
Juan M Sestelo
__________________________________________________
Correo Yahoo!
Espacio para todos tus mensajes, antivirus y antispam ˇgratis!
ˇAbrí tu cuenta ya! - http://correo.yahoo.com.ar
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
