Application help for SNC configuration (transaction SNCCONFIG)

Displaying the SNC Configuration for Application Server ABAP


&SHORTTEXT&
SNC Configuration


&USE&
This transaction allows you to display an SNC configuration by setting
relevant profile parameters. This transaction displays the following
settings:
Usage of SAP Single-Sign-On for SNC with Kerberos and SPNego
Same SNC identity for all application server instances
Single sign-on for end users


&RESTRICTIONS&
The same profile parameters are used for all application server
instances.
Only SAP Single Sign-On is supported as an SNC product. You cannot use
this transaction to configure any other third-party SNC product.
You cannot change individual profile parameter values in this
transaction. However, you can still implement complex profile parameter
configurations using
<DS:TRAN.RZ11>RZ11</> and
<DS:TRAN.STRUST>Trust Manager</> to do so.


&INTEGRATION&
The SNCCONFIG transaction displays a table that lists the application
server instances that are available for an SAP system. The table
contains the host name, the SNC state, and the server state. If you
select an application server instance, the bottom section displays the
relevant profile parameters for SNC and SPNego.
In the bottom section, you can see the profile parameters values for the
application server instances. The <ZH>SNC</> and <ZH>SPNego</> tabs
display the SNC and SPNego profile parameters and their respective
values. SNC and SPNego are important if you want to implement single
sign-on for Kerberos authentication.


&PREREQUISITES&
SAP Cryptographic Library (CommonCryptoLib) is available in the SAP
system. For more information, see SAP Note 1848999.

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

&FEATURES&
Simple display of an application server instance?s default SNC
configuration for single sign-on with Kerberos and SPNego. The following
functions are available:
?,,Display of the current SNC configuration state of all application
server instances belonging to an SAP system
?,,Check of the current SNC configuration

How to fix this error?

Checking SNC State
To check whether you can start an AS ABAP with the given SNC
configuration, take the following steps:
Select the row for the application server instance you want to check.
The field <ZH>Default SNC Identity</> contains the SNC name. The <ZH>SNC
</> and <ZH>SPNego</> tabs display the profile parameter settings of
this application server instance.
Choose <ZH>Check SNC</>.
Result
If your check is successful, the respective cell in the <ZH>SNC State</>
column changes to <ZK>SNC Check OK</>. This means that the SNC
configuration of the application server instance is correct and can be
activated.
If the SNC configuration is not correct, the column <ZH>SNC State</> has
the value <ZK>SNC Check Error</>. In this case, choose the short error
text, and a popup with a detailed error description appears.
If the SNC configuration is correct, the <ZH>SNC State</> column
contains <ZK>Restart Required</>. This means that a restart is the next
steps for activating SNC protection of the selected application server
instances.

Error message extract from SAP system. Copyright SAP SE.