Symptom
Single Sign-On authentication with Kerberos fails with the error
Error connecting to database [523 92[SAP AG][LIBODBCHDB SO][HDBODBC] Communication link failure;-10709 Connection failed (RTE:[200106] Protocol error, invalid authentication packet)
Enhancing tracing on [authentication] as per SAP Note: 2083682 - How to Enhance Tracing for SAP HANA SSO Login Issues shows the following
w Authentication Context.cpp(00277) : GSS_S_FAILURE: The routine failed for reasons that are not defined at the GSS level. The minor_status return parameter contains a mechanism-dependent error code describing the reason for the failure.
w Authentication MethodGSSAcceptor.cpp(00268) : processGssToken: accept security context failed
w Authentication MethodGSSAcceptor.cpp(00087) : evaluate: process GSS token failed
w Authentication sm_codec_newdb.cc(00949) : Authentication failed! client address=<ip_addr:port>
e Authentication AbstractMethodGSSAcceptor.cpp(00032) : Error during Kerberos: Major: "unspecified [851968]", minor: "Clock skew too great [2529638949/-1765328347]"
Read more...
Environment
SAP HANA all versions
Product
Keywords
kerberos, SSO, major unspecified, minor, clock, skew, NTP , KBA , HAN-DB-SEC , SAP HANA Security & User Management , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.