Unable to Start Up ABAP Instance due to snc/enable=1

[Former Member]

Hi All,

I'm having some issue on starting my ABAP instance due to tryout of the SSO.

the error as such

how do I configure this credential SAPKerberosABC in my ABAP instance?

My environment is ECC6 EPH7, steps that I done as such:

1. copy gx64krb5.dll to system32 folder (note 353395)

2. created an username in my AD and accept Kerberos e.g. SAPKerberosABC

3. set the profile

snc/enable = 1

snc/gssapi_lib = c:\Windows\System32\gx64krb5.dll

now I need to disable manually the snc/enable from the work directory in order for me to start up the ABAP instance.

any clue on how to configure SSO?

Thank you,

Regards,,

Ura

[former_member190695]

Hi Ura,

You have a double CN and also I don't see the step setting up Keytab (sapgenpse.exe) and Kerberos in the ABAP system (Transaction spnego).

Regards,

Ridouan

[Former Member]

Hi Ura,

the Server SNC Name you configure is: "p:CN=CN=SAP..."

Actually it should be "p:CN=SAP..."

You have one "CN=" too much.

KR

Valerie

[Former Member]

Did you set you SECUDIR environment to $(DIR_INSTANCE)/sec?

**If you are using SAP NW AS ABAP 7.0, you need to set the environment variable <SECUDIR> to $(DIR_INSTANCE)/sec. Otherwise SAP NW AS ABAP 7.0 does not start.

Regards,

Florence

[hemanth2]

Hi Ura,

Hope you are doing good.

I think I know what the issue is. Are you using SSO encryption? If not, could you please set the parameter snc/data_protection/min to 1 and see if the issue persists? Check SAP Notes 150380 and 352295 for implementation of SSO using Kerberos in Microsoft Windows OS.

____________

Kind Regards,

Hemanth

SAP AGS

[former_member182657]

Hi Ura,

To disable parameter snc/enable = 0 try to search under profile at OS level and change the value from 1 to 0.Share the results after re check if any.

Regards,

Gaurav