SAP SSO – known errors and their solutions

While configuring SAP SSO, I encountered various errors. Here they are described together with the solutions:

Solution:

2304831 – Programs fail after CCL 8.5 is installed


Solution:

Problem with environment SNC_LIB. In place of:

SNC_LIB=gsskrb5.dll

should be:

SNC_LIB=C:\Program Files (x86)\SAP\FrontEnd\SecureLogin\lib\sapcrypto.dll

Solution:

sapgenpse seclogin -p SAPSNCSKERB.pse -O SIDADM

Solution:

Check notes: 2044027 – No logon ticket created after SPNego logon (ABAP)

Additional replace sapgenpse with a newer version. Details in the note: 1848999 – Central Note for CommonCryptoLib 8 (replacing SAPCRYPTOLIB)

Regenrate files *.PSE using the new sapgenpse and check transaction: SECSTORE


Solution:

We’re using the wrong library. Instead of libgssapi_krb5.so we should use libsapcrypto.so


Solution:

Secstore (Secure Storage -> transaction: SECSTORE) had wrong passwords for SPNego. You should once again enter the correct passwords in SPNEGO transaction.


Solution:

Check note: 2345858 – SAP SSO Fixes for Secure Login Client 3.0 SP 00 Patch 02