SAP Knowledge Base Article - Preview

2388373 - ERROR: Kerberos service account / principle name must contain a '@'!


During the creation of PSE file (for example with command sapgenpse) in IBM AS400 environment one of the following errors occur:

ERROR: Kerberos principle name must contain a '@'!
       Syntax: <service_user>@<domain> e.g. SAPService<SID>@SAP.COM
ERROR: Kerberos service account name must contain a '@' !
       Syntax: <service_account>@<domain> e.g. SAPService<SID>@SAP.COM

For example:

kerberos error as400.png



  • SAP Single Sign-on 2.0
  • SAP Single Sign-on 3.0
  • SNC Client Encryption 1.0
  • IBM AS400


SAP ERP 6.0 ; SAP NetWeaver all versions ; SAP Single Sign-On 2.0 ; SAP Single Sign-On 3.0 ; SAP Solution Manager 7.2


SNC Client Encryption, @ sign within qp2term and sapgenpse, AS/400, V7R1M0, , KBA , , BC-IAM-SL , Please use BC-IAM-SSO* , BC-IAM-SSO-SL , Secure Login , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.