Hi, I am configuring a Single Sign-On AS ABAP with Kerberos, however when I try to logon in SAP GUI it gives me the following error:
Note: I have also tried p:CN=SAPServicePG1@<DOMAIN> and it gives me the same error.
The profile parameter I used are the following:
snc/enable=1
snc/gssapi_lib=E:\usr\sap\DG1\DVEBMGS00\SLL\sapcrypto.dll
snc/identity/as= p:CN=SAPServicePG1@<DOMAIN>
snc/data_protection/min=2
snc/data_protection/max=3
snc/data_protection/use=3
snc/accept_insecure_gui=1
snc/accept_insecure_rfc=1
snc/accept_insecure_cpic=1
snc/permit_insecure_start=1
snc/r3int_rfc_qop=8
snc/r3int_rfc_secure=0
snc/force_login_screen=0
spnego/enable=1
spnego/krbspnego_lib= E:\usr\sap\PG1\DVEBMGS00\SLL\sapcrypto.dll
SAPCRYPTOLIB= E:\usr\sap\PG1\DVEBMGS00\SLL\sapcrypto.dll
Note: Where appears <DOMAIN> I replaced it with the correct domain.
The output of sapgenpse and sapgenpse seclogin -l are the following:
What could I do to solve this error? I have already generate the SAPSNCSKERB.pse all over again and it give me the same error.
One question, PIN/password of Keytab can include characters like !, &, $?