SAP Knowledge Base Article - Preview

3022565 - Received KRB-ERR message: error code 13 KDC_ERR_BADOPTION - Principal Propagation with Kerberos fails

Symptom

  • A Principal Propagation scenario with Kerberos between SAP BTP and an on-premise system via Cloud Connector is not working.
  • In the Cloud Connector logs (ljs_trace), the following error is found:

#ERROR#com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler#tunnel-client-21-1#0xc639dfa9#Unable to generate authorization token
com.sap.core.connectivity.spi.sso.BackendTokenGenerationException: Could not create SPNego token
...
Caused by: com.sap.security.krb5.exceptions.KrbException: Received KRB-ERR message: error code 13 [KDC_ERR_BADOPTION (KDC cannot accommodate requested option)]


Read more...

Environment

  • SAP Business Technology Platform, Neo environment
  • SAP Cloud Connector

Product

SAP Business Technology Platform all versions

Keywords

btp, scp, sap cp, scc, pp, user, login, sso , KBA , BC-NEO-SEC-IAM , Authentication, Authorization(Cloud Platform Neo) , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.