SAP Knowledge Base Article - Preview

2388373 - ERROR: Kerberos service account / principle name must contain a '@'!

Symptom

During the creation of PSE file (for example with command sapgenpse) in IBM AS400 environment one of the following errors occur:

  •  
 ERROR: Kerberos principle name must contain a '@'!
       Syntax: <service_user>@<domain> e.g. SAPService<SID>@SAP.COM
   
  •  
 ERROR: Kerberos service account name must contain a '@' !
       Syntax: <service_account>@<domain> e.g. SAPService<SID>@SAP.COM

For example:

kerberos error as400.png


Read more...

Environment

  • SAP Single Sign-on 2.0
  • SAP Single Sign-on 3.0
  • SNC Client Encryption 1.0
  • IBM AS400

Product

SAP ERP 6.0 ; SAP NetWeaver all versions ; SAP Single Sign-On 2.0 ; SAP Single Sign-On 3.0 ; SAP Solution Manager 7.2

Keywords

SNC Client Encryption, @ sign within qp2term and sapgenpse, AS/400, V7R1M0, , KBA , sapserviceds4@sap.com , BC-IAM-SL , Please use BC-IAM-SSO* , BC-IAM-SSO-SL , Secure Login , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.