SAP Knowledge Base Article - Preview

1938645 - Troubleshooting kerberos authentication user resolution issues.

Symptom

  1. The configuration of SPNego for kerberos authentication using the SPNego Configuration Wizard has been completed
  2. Kerberos authentication fails for one or more users
  3. From examining authentication traces, it observed that an SPNego token was received by the AS Java but the attempt to find a user in the UME using the KPN extracted from the kerberos token failed


Read more...

Environment

  • Netweaver Application Server Java with LDAP UME datasource(s) configured for SPNego (New implementation - see note 1488409)
  • SAP NetWeaver
  • Release independant

Product

SAP NetWeaver 2004 ; SAP NetWeaver 7.0 ; SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver Composition Environment 7.1 ; SAP NetWeaver Composition Environment 7.2 ; SAP enhancement package 1 for SAP NetWeaver 7.0 ; SAP enhancement package 1 for SAP NetWeaver 7.3 ; SAP enhancement package 1 for SAP NetWeaver Composition Environment 7.1 ; SAP enhancement package 2 for SAP NetWeaver 7.0 ; SAP enhancement package 3 for SAP NetWeaver 7.0

Keywords

com.sap.security.api.NoSuchUserAccountException Could not search for user by logon alias principal@REALM com.sap.engine.services.security.authentication.umapping filter SPNEGOUserMappingUtil com.sap.security.core.authentication samaccountname logonalias , KBA , BC-JAS-SEC-LGN , Logon, SSO , BC-JAS-SEC-UME , User Management Engine , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.