SAP Knowledge Base Article - Preview

3482565 - Kerberos token request fails: "The encryption type requested is not supported by the KDC"

Symptom

When trying to perform Kerberos SNC SSO, no token is acquired in the client side.

When attempting to perform SSO, this results in a fallback to X.509 certificate-based SNC authentication, ending with the following error:

A2210223: Server does not trust my certificate path


Read more...

Environment

SAP Netweaver Application Server for ABAP

Microsoft Windows

Product

SAP NetWeaver Application Server for ABAP all versions ; SAP S/4HANA all versions ; SAP Secure Login Client all versions ; SAP Single Sign-On all versions

Keywords

KDC_ERR_ETYPE_NOSUPP, kRB5-NT-SRV-INST, eRR-ETYPE-NOSUPP, klist failed with @xc000018b/-1073741429: The SAM database on the Windows Server does not have a computer account for this workstation trust relationship, klist failed with @xc00002fd/-1073741059: The encryption type requested is not supported by the KDC, Error for requested algorithm: 0/C000018B The security database on the server does not have a computer account for this workstation trust relationship.   , KBA , BC-IAM-SSO-SL , Secure Login , BC-SEC-LGN , Authentication , BC-SEC-LGN-SPN , SPNego for ABAP , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.