SNCWIZARD without SPNego

[#1]

Hi,

I've used the SNCWIZARD to configure SNC SSO via the Secure logon client, and used SPNego to configure the keytab, however we don't want to enable Spnego via HTTP.

Does anyone know if it is possible to disable SPNego (via RZ10 parameter) but still use the SPNEGO transaction to maintain the keytab, or do we need to create a separate SAPSNCKERB.pse file?

Many thanks,

Jason

[donka_dimitrova · Accepted solution]

Hello Jason,

You will not be able to use the transaction to configure the keytab for SNC if SPNego is disabled.

Regards,

Donka Dimitrova

[Wolfgang_Janzen · Accepted solution]

Well, actually it's the other way round:
If you use t-code SPNEGO to create a keytab, then SPNego will be activated.
So, if you do not like SPNego to be activated, you must not use t-code SPNEGO to create a keytab.

That's actually independent from the SNC library - in order to be able to use SPNego you have to use a(ny) Kerberos-based SNC library, however (since SPNego and SNC are sharing the same mappings). The t-code SNCWIZARD, however, will only work when using the CommonCryptoLib as SNC library.

[Wolfgang_Janzen · Accepted solution]

This has changed (recently) - see SAP Note 2287976, providing a solution.

[Former Member · Accepted solution]

Donka,

In one of our system  SPNEGO is enabled and still unable to store the keytab values in SPNEGO tcode and values are lost after saving the same in spnego transacation

Thanks,

Bharathi

[donka_dimitrova · Accepted solution]

Hello Bharathi,

Please, create a CSS ticket and describe the problem.

Regards,

Donka

[Former Member · Accepted solution]

Hi Donka,

Can you please help me? on below discussion? Error in SSO with kerberos SNCWIZARD method.

http://scn.sap.com/thread/3958917

Regards,