SAP Knowledge Base Article - Preview

2976457 - "The received token is either outdated or not yet valid" error in transaction SNCWIZARD or SPNEGO

Symptom

When configuring SPNego through transaction SNCWIZARD or launching transaction SPNEGO, the following error occurs:

The received token is either outdated or not yet valid, check your systems' clock skews. Current time: <yyyyMMddHHmmss1>, Token creation time: <yyyyMMddHHmmss2>, Token expiration time: <yyyyMMddHHmmss3>

Or:

The received token is either outdated or not yet valid, check your systems' clock skews. Current time: <yyyyMMddHHmmss>, Token creation time: ?, Token expiration time: ?


Read more...

Environment

  • ABAP (component SAP_BASIS):
    • 7.40 SP 2 (or higher) (additionally apply SAP Notes 1819808 and 1832706)
    • 7.31 SP 7 (or higher) (additionally apply SAP Notes 1819808 and 1832706)
    • 7.30 SP 10 (or higher) and SAP Note 1879371 (SP 11) (corrections of SAP Notes 1819808 and 1832706 are already contained)
    • 7.02 SP 14 (or higher) and SAP Note 1879371 (SP 15) (corrections of SAP Notes 1819808 and 1832706 are already contained)
  • Kernel: 7.21 (EXT) PL 41 (or higher), see SAP Note 1716826 (recommended: 7.21 EXT PL 110 or higher, see SAP Note 1819808)
  • CommonCryptoLib (CCL), as part of latest stack kernel shipments (see SAP Note 1848999)

Product

SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP enhancement package 1 for SAP NetWeaver 7.3 ; SAP enhancement package 2 for SAP NetWeaver 7.0

Keywords

SNCWIZARD, SPNEGO, clock, time, AD server, KDC, ABAP, kerberos, token, configure , KBA , BC-IAM-SSO-SL , Secure Login , BC-SEC-LGN , Authentication , BC-IAM-SSO-CCL , CommonCryptoLib , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.