Symptom
- customers attempting to access MSAS / SSAS cubes received "401 - Unauthorized: Access is denied due to invalid credentials"
- error in the MDAS logs was "NEGOTIATE authentication error: No valid credentials provided (Mechanism level: No valid credentials provided (Mechanism level: KDC cannot accommodate requested option (13)"
- error in packet scan from BI server was "KRB Error: KRB5KDC_ERR_BADOPTION NT Status: STATUS_NO_MATCH"
- further looking into the packet scan it was noticed the SSAS IIS SPN (HTTP/IISserver.IISdomain) was sending an incorrect domain name.
Read more...
Environment
SAP Business Intelligence Platform 4.2 or 4.3 version is not important as the issue is external to BI
Product
SAP BusinessObjects Business Intelligence platform all versions
Keywords
KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.