Hi Experts,
We would like to configure SNC tab in SAP authentication plugin on BO 4.1 SP3.4 on Windows in order to have SSO between BO and legacy universes OLAP BAPI BW and have some problems.
We have followed guides of Ingo Hilgefort:
BusinessObjects Enterprise and client side SNC Part 1 and 2
But in our case we have use gx64krb5.dll library (kerberos)
Our BW server is on Unix and have following parameter in profile:
snc/gssapi_lib /usr/lib/hpux64/gss/libgssapi_krb5.so
The erro we have in CPIC traces is:
...7.... ..
[Thr 5392] ->> SncPFrameOut(): state=DO_INITIATE, role=INITIATE, p_in->len=234
[Thr 5392] *** ERROR => SncPEstablishContext() failed for target='p:SAPServiceWS0@RM.GR.REPSOLYPF.COM' [sncxxall.c 3386]
[Thr 5392] *** ERROR => SncPEstablishContext()==SNCERR_GSSAPI [sncxxall.c 3352]
[Thr 5392] GSS-API(maj): Miscellaneous Failure
[Thr 5392] GSS-API(min): SSPI::IniSctx#1()==The encryption type requested is not supported by the KDC.
[Thr 5392] Unable to establish the security context
[Thr 5392] target="p:SAPServiceWS0@RM.GR.REPSOLYPF.COM"
[Thr 5392] <<- SncProcessOutput()==SNCERR_GSSAPI
[Thr 5392] NiIWrite: hdl 1 sent data (wrt=416,pac=1,MESG_IO)
[Thr 5392] ->> SncSessionDone(&snc_hdl=000000000F0E08B8)
[Thr 5392] snc_hdl=000000000F12D1F0
[Thr 5392] <<- SncSessionDone()==SAP_O_K
We try with different encryption types. Our actual KRB5.ini in BO server is:
[libdefaults]
default_realm = RM.GR.REPSOLYPF.COM
dns_lookup_kdc = true
dns_lookup_realm = true
allow_weak_crypto = true
default_tgs_enctypes = RC4-HMAC des-cbc-crc
default_tkt_enctypes = RC4-HMAC des-cbc-crc
udp_preference_limit = 1
[realms]
RM.GR.REPSOLYPF.COM={
kdc = SSMADTCDRM08.RM.GR.REPSOLYPF.COM
kdc = SSMADTCDRM11.RM.GR.REPSOLYPF.COM
kdc = SSMADTCDRM12.RM.GR.REPSOLYPF.COM
default_domain = RM.GR.REPSOLYPF.COM
}
Any help would be appreciated.
Carlos