Symptom
- A Principal Propagation scenario with Kerberos between SAP BTP and an on-premise system via Cloud Connector is not working.
- In the Cloud Connector logs (ljs_trace), the following error is found:
#ERROR#com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler#tunnel-client-21-1#0xc639dfa9#Unable to generate authorization token
com.sap.core.connectivity.spi.sso.BackendTokenGenerationException: Could not create SPNego token
...
Caused by: com.sap.security.krb5.exceptions.KrbException: Received KRB-ERR message: error code 13 [KDC_ERR_BADOPTION (KDC cannot accommodate requested option)]
Read more...
Environment
- SAP Business Technology Platform, Neo environment
- SAP Cloud Connector
Product
Keywords
btp, scp, sap cp, scc, pp, user, login, sso , KBA , BC-NEO-SEC-IAM , Authentication, Authorization(Cloud Platform Neo) , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.