cancel
Showing results for 
Search instead for 
Did you mean: 

SSO issue in Upgraded Netweaver 7.4

0 Kudos

Hi experts,

We have completed the SAP Portal Upgrade from Netweaver 7.0 to 7.4 .

In Netweaver 7.0 , we have configured SSO between windows active directory  to Portal with help of SAP note 1457499 & attached configuration guide. it worked fine before the upgrade process.

but now in the Netweaver 7.4 which is not worked so  again we configured the SSO as per the below SCN Link step 4 for Configuring the SSO between Java & Windows active directory.After completing that configuration also  still  SSO is not working.

please provide us your valuable suggestion to fix the SSO in Netweaver 7.4.

SSO configuration in SCN :   (Enable Single Sign-On on SAP AS JAVA)

Regards

Sebastian A

Accepted Solutions (1)

Accepted Solutions (1)

0 Kudos

Hi Cathal,

We have fixed this issue with help of OSS message. We changed the ticket login stack from SPNEGO to SPnego and it worked.

Thanks

cathal_ohare
Employee
Employee
0 Kudos

Good Stuff,

SPNEGO is the add-on for the older add-on in the 7.00, which is SPNego by default in the new systems. My guess is you were getting the error can't load login module.

Answers (2)

Answers (2)

Former Member
0 Kudos

Hello,

Can you please explain what exactly and where exactly you have done the changes

Amar

cathal_ohare
Employee
Employee
0 Kudos

Hi Sebastian,

There is not a massive difference in the spnego from 7.0 to 7.4, the main difference that the 7.4 system can generate a keytab file itself as it comes with a 1.6 jdk. if you imported an old keytab file I suggest you run the wizard again and use the one it generates.

Have you collected any traces, if not try the reproduce the issue (on a fresh browser session) while the troublshooting wizard is running, (example 1 from note 1332726). You should see the initial part of spnego (it will be a failed login with the error "Trigger spnego athentication" then if all seems ok on the AD/browser side and there are no decryption issues a kerberos token should be recieved then we should see another login were the spnegomodule deals with the token, you can upload the output of this trace for assistance.


Best regards,

Cathal