Symptom
You have tried to configure Kerberos SSO on HANA Web IDE. When testing the configuration you run into an error like the one below.
python hdbkrbconf.py -v -V
Password for Active Directory user test1234@company.com:
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
Retrieving TGT for HANA DB external user ...OK
COMMAND: $DIR_EXECUTABLE/krb5/bin/kinit -V test1234@company.com
RETURN CODE: 0
STDOUT: "Password for kinit -V test1234@company.com:"
STDERR: "/bin/sh: line 1: warning: here-document at line 0 delimited by end-of-file (wanted `EOF')
Using default cache: /tmp/krb5cc_5067
Using principal: kinit -V test1234@company.com
Authenticated to Kerberos v5"
Trying Kerberos login to HANA DB with test user ...FAILED
ERROR: Could not connect to HANA DB with Kerberos
COMMAND: $DIR_EXECUTABLE/hdbsql -n localhost:30013
RETURN CODE: 1
STDOUT: "
Welcome to the SAP HANA Database interactive terminal.
Single Sign-On authentication failed
You have also checked the resources below and are unsure on the cause for this error.
2354556 - Common errors when executing hdbkrbconf.py for known issues and solutions
Read more...
Environment
HANA Platform Edition 2.0
Product
Keywords
Kerberos, SSO, HANA, IDE, Web IDE, SPNEGO, authentication, permissioned denied, rcache , KBA , HAN-DB-SEC , SAP HANA Security & User Management , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview