SAP Knowledge Base Article - Preview

2388373 - ERROR: Kerberos service account / principle name must contain a '@'!


During the creation of PSE file (for example with command sapgenpse) in IBM AS400 environment one of the following errors occur:

ERROR: Kerberos principle name must contain a '@'!
       Syntax: <service_user>@<domain> e.g. SAPService<SID>@SAP.COM
ERROR: Kerberos service account name must contain a '@' !
       Syntax: <service_account>@<domain> e.g. SAPService<SID>@SAP.COM

For example:

kerberos error as400.png



  • SAP Single Sign-on 2.0
  • SAP Single Sign-on 3.0
  • SNC Client Encryption 1.0
  • IBM AS400


SAP ERP 6.0 ; SAP NetWeaver all versions ; SAP Single Sign-On 2.0 ; SAP Single Sign-On 3.0 ; SAP Solution Manager 7.2


SNC Client Encryption, @ sign within qp2term and sapgenpse, AS/400, V7R1M0, , KBA , , BC-IAM-SL , Please use BC-IAM-SSO* , BC-IAM-SSO-SL , Secure Login , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.