GSS-API(maj): Miscellaneous Failure

[Former Member]

Hi dear SAP Forum,

After Configured SNC Kerberos we have this problem on Client Side

Sapgui 750 [Build 9057] Tue Feb 06 15:30:17 2018
GSS-API(maj): Miscellaneous Failure
GSS-API(min): SSPI::IniSctx#1()==Specified target is unknown or unreac
target="p:CN=<SID>@<Domain Name"

Tx. SNCCONFIG :

Default SNC Identity

p:CN=<SID>

SNC State = Active

PARAMETERS:

snc/accept_insecure_cpic = 1

snc/accept_insecure_gui = 1

snc/accept_insecure_r3int_rfc = 1

snc/accept_insecure_rfc = 1

snc/accept_insecure_rfc = 1

snc/data_protection/max = 3

snc/data_protection/min = 2

snc/data_protection/use = 3

snc/enable = 1

snc/extid_login_diag = 1

snc/extid_login_rfc = 1

snc/force_login_screen = 0

snc/gssapi_lib = /usr/sap/<SID>/SYS/exe/run/libsapcrypto.so

snc/identity/as = <SID>

snc/only_encrypted_gui = 0

snc/only_encrypted_rfc = 0

snc/permit_insecure_start= 1

snc/r3int_rfc_qop = 8

snc/r3int_rfc_secure = 0

spnego/construct_SNC_name = 111

spnego/enable = 1

spnego/krbspnego_lib = /usr/sap/<SID>/SYS/exe/run/libsapcrypto.so

Thanks in advance

Cheers

[Former Member]

Hi dear SAP Forum,

After Configured SNC Kerberos we have this problem on Client Side

Sapgui 750 [Build 9057] Tue Feb 06 15:30:17 2018
GSS-API(maj): Miscellaneous Failure
GSS-API(min): SSPI::IniSctx#1()==Specified target is unknown or unreac
target="p:CN=<SID>@<Domain Name"

Tx. SNCCONFIG :

Default SNC Identity

p:CN=<SID>

SNC State = Active

PARAMETERS:

snc/accept_insecure_cpic = 1

snc/accept_insecure_gui = 1

snc/accept_insecure_r3int_rfc = 1

snc/accept_insecure_rfc = 1

snc/accept_insecure_rfc = 1

snc/data_protection/max = 3

snc/data_protection/min = 2

snc/data_protection/use = 3

snc/enable = 1

snc/extid_login_diag = 1

snc/extid_login_rfc = 1

snc/force_login_screen = 0

snc/gssapi_lib = /usr/sap/<SID>/SYS/exe/run/libsapcrypto.so

snc/identity/as = <SID>

snc/only_encrypted_gui = 0

snc/only_encrypted_rfc = 0

snc/permit_insecure_start= 1

snc/r3int_rfc_qop = 8

snc/r3int_rfc_secure = 0

spnego/construct_SNC_name = 111

spnego/enable = 1

spnego/krbspnego_lib = /usr/sap/<SID>/SYS/exe/run/libsapcrypto.so

Thanks in advance

Cheers

[Former Member]

We are following this post:

https://wiki.scn.sap.com/wiki/display/Security/Miscellaneous+failure+Error+in+SNC

Verify if Kerberos token is displayed in Secure Login Client Console.

Q: We don't have Secure Login Client Console installed because this product needs a license

Verify if the security token (Kerberos or certificate) is used.

1. Try with the option Use Profile for SAP Applications if the desired profile is used.
2. Q: Where can I set this option?

Verify if the environment variable SNC_LIB is configured to use sapcrypto.dll.

SNC_LIB (on the PC Syde) =

SNC_LIB=gsskrb5.dll

Thanks in Advance