SAP Knowledge Base Article - Preview

3492454 - ABAP SPNego : Received SPNego token with creation timestamp (authenticator) in the future

Symptom

SPNego fails. In SEC_TRACE_ANALYZER trace, error like below shows:

N  SPNegoValidateToken: Received SPNego token with creation timestamp (authenticator) in the future
N     User Principal Name (End-user): XXXXXX
N     Creation time                 : 20240529062119
N     Current time                  : 20240529061510
N     Tolerable clock skew          : 5 min. Synchronize clocks to minimize clock skew!
N  SPNegoValidateToken: Finished (rc=-20)


Read more...

Environment

  • SAP NetWeaver ABAP
  • SAP NetWeaver Application Server for SAP S/4HANA
  • ABAP PLATFORM - Application Server ABAP

Product

ABAP platform all versions ; SAP NetWeaver Application Server for ABAP all versions ; SAP NetWeaver Application Server for SAP S/4HANA all versions

Keywords

sap-ssolist, SPNEGO SSO, SPNego based SSO, kerberos token, Time synchronization, clock skew , KBA , BC-SEC-LGN-SPN , SPNego for ABAP , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.