topic Error with sapssoext in Application Development and Automation Discussions

Error with sapssoext

Former Member — Fri, 04 Jul 2008 20:34:44 GMT

Hi,

I am running the often refered to sample java program to parse and inspect mysso2 ticket (Class SSO2Ticket) .

I am getting the following error :

D:\Temp>java SSO2Ticket -i d:
temp
mysso.txt

SAPSSOEXT loaded.

static part ends.

Start SSO2TICKET main

test version -

Version of SAPSSOEXT: SAPSSOEXT 2

evalLogonTicket

java.lang.Exception: MySapEvalLogonTicketEx failed: standard error= 5, ssf error

= 26

Does anyone know what it is ?

It is happening in evalLogonTicket .

Thank you.

Re: Error with sapssoext

Former Member — Mon, 07 Jul 2008 11:30:58 GMT

Hi Thierry,

Error-Text: SSF_API_NOCERTIFICATE

this "explanation" can be found in sapssoext.h of the C-implementation of ssoext.

It should mean (I am always careful here ) that the ticket has been signed by a system, who's public key is not (yet) imported into the keystore (.pse file) used by ssoext.

Solution: Try to follow these steps:

1) On the machine that creates the logon ticket export the public key / certificate to a file (cert.txt) by

sapgenpse export_own_cert -p SAPSYS.pse -o cert.txt 2) Then copy cert.txt to the machine that should verify the logon ticket 3) Import cert.txt into the .pse file ("ssoext-PSE") on the machine verifying your ticket by sapgenpse maintain_pk -a cert.txt -p ...pse

I assume that this solves your problem.

Please be aware that this direct exchange of public keys is not necessarily what you want: Maybe you prefer to have the key of the system that creates the logon ticket signed by an certification agency (CA). In this case it can be sufficient to import the public key / certificate of the CA into your "ssoext-PSE" file.

Please let me know whether you could follow those steps.

Best regards,

Ralf

Re: Error with sapssoext

Former Member — Tue, 08 Jul 2008 15:41:39 GMT

Hi,

I do not have a pse file. Also , the reason I'm using this program is to find out where the ticket was generated.

In the java code , there is the folowing line , so I assumed that a default pse would be used if I didn't provide one.

evalLogonTicket(ticket, pab!=null?pab:"SAPdefault" , null);

Also, where did you get the .h files ? I just have the dll's.

Thanks.

Re: Error with sapssoext

Former Member — Tue, 08 Jul 2008 17:32:34 GMT

Hi Thierry,

<removed_by_moderator> I got a little excel-sheet that is able to decode SSO2 logon tickets.

The .h files where part of the ssoext download from SAP - but I can't get the details right now. You will also find the error codes in ABAP in include SSFCONST (display with SE38).

Hope this works beter for you ...

Best regards,

Ralf

Edited by: Julius Bussche on Jul 8, 2008 5:51 PM

Re: Error with sapssoext

Former Member — Tue, 08 Jul 2008 17:45:41 GMT

<removed_by_moderator>

Thank you.

Edited by: Julius Bussche on Jul 8, 2008 5:52 PM

Re: Error with sapssoext

Former Member — Tue, 08 Jul 2008 17:54:04 GMT

Sorry guys, but those are "the rules" and we don't want to be spammed (again)

Cheers,

Julius

Re: Error with sapssoext

Former Member — Thu, 10 Jul 2008 17:15:13 GMT

Ralf ,

would you mind posting your spreadsheet ?

Thanks.

Re: Error with sapssoext

Former Member — Thu, 10 Jul 2008 19:56:40 GMT

I am Julius, not Ralf

There are 2 options (here at SDN) for this:

- Write a blog on how to do it.

- Email the Excel file to me, and I have a way of attaching it to the thread.

Cheers,

Julius

Re: Error with sapssoext

Former Member — Fri, 15 Feb 2013 14:32:47 GMT

SSO implementation between SAP Portal and third party java application

Hello All

Please Help me out.

As if I m doing SSO with SAP.

By using SSO2Ticket with main method i can get the Result of the ticket. but i need to implement that in my Application. But i cant do that because i m getting the below error

sapsecu.dll: java.lang.UnsatisfiedLinkError(init)

I am ruuning my Application in Jboss 4.3. in that application needed to implement the code for SSO

Please help me out as soon as possible

Thanks & Regards

Manjunath Patil