Hello Experts,
We are using SAP NetWeaver Single Sign-On to enable SAP GUI SSO. Our configuration uses Kerberos integration (SAP GUI for Window, Secure network communications - SNC).
I've been ask to change the password of the Kerberos service account as part of a yearly security task but it is not clear what all the steps that are needed to ensure Kerberos authentication is not interupted
Certainly I can change the pwd for the SPN account in Windows but I am not clear on what steps need to be taken on the SAP side to maintain the Kerberos authentication. From what I have read, a new keytab needs to be created but how exactly is this done? I also read there is a command line utility SAPGENPSE that is used to generate PSE file and Kerberos keytab when initially configuring the setup. Would this be used again to generate a new keytab file? Is there any other method that can be accessed from SAPGUI instead of a command line utility program?
Would very much appreciate your help to get a clear picture of the steps required to successfully update the SPN account password.
Regards,
Stephen Brewer