Hi All,
We are configuring SPNego Authentication to SAP NW 7.4 portla and Windows AD.
SAP NW 7.4 is on SP08 in AIX 7.1 and Windows AD on Windows 2012 server. As described in help.sap.com documentation we have done below steps.
1. Created service user in Windows AD with no expire and no password change.
2. Created REALM as explained.
3. Created and configured SPNegoLoginModule in NWA.
But still we are not able to login to NW 7.4 with kerberos authentication. We found below errors and warnings in security troubleshooting wizard in NWA.
Error:
Invalid ticket endtime: 20150309155820Z
11:42:14:338 Error Guest HTTP Worker [@907185622],5,D... ....core.server.jaas.SPNegoLoginModule
Could not validate SPNEGO token.
Warnig:
Can't map exception.
[EXCEPTION] com.sap.engine.services.security.exceptions.BaseLoginException: Cannot authenticate the user.
Kindly Suggest,
Regards,
Sree