Symptom
- customers attempting to access MSAS / SSAS cubes received "401 - Unauthorized: Access is denied due to invalid credentials"
- error in the MDAS logs was "NEGOTIATE authentication error: No valid credentials provided (Mechanism level: No valid credentials provided (Mechanism level: KDC cannot accommodate requested option (13)"
- error in packet scan from BI server was "KRB Error: KRB5KDC_ERR_BADOPTION NT Status: STATUS_NO_MATCH"
- further looking into the packet scan it was noticed the SSAS IIS SPN (HTTP/IISserver.IISdomain) was sending an incorrect domain name.
Read more...
Environment
SAP Business Intelligence Platform 4.2 or 4.3 version is not important as the issue is external to BI
Keywords
KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.