Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-2387: Not able to startup SAP with Centrify SAP SNC plug-in on HPUX with error " The specified authentication mechanism is unsupported. "

Centrify DirectControl ,   Centrify DirectControl Plugins ,  

12 April,16 at 11:07 AM

Applies to:


SAP 720 on HPUX

Problem:

Not able to startup SAP with Centrify-enabled SAP plug-in on HPUX with error in dev log:


===

N *** ERROR => SncPDLInit(): gss_indicate_mechs() failed [sncxxdl.c 493] 
N *** ERROR => SncPDLInit(()==SNCERR_INIT [sncxxdl.c 488] 
N GSS-API(maj): The specified authentication mechanism is unsupported. 
N STOP! -- initial call to gss_indicate_mechs() failed 
N *** ERROR => SncPDLInit()==SNCERR_INIT, Adapter #1
(/usr/share/centrifydc/lib/hpux64/snckrb5.so) not loaded [sncxxdl.c 639]

===

Cause:

This is caused by a HPUX bug. SAP version 7.2 started calls routines that pull in the dce libraries before invoking snckrb 
routines.  As a result, when snckrb routines are invoked, it will call the krb5 libraries from DCE libraries, not the Centrify provided krb5 libraries.

Resolution:

Centrify introduced the -B directive in the attached snckrb5.so library to workaround this problem.
Please download the attachment in this KB and extract the zip file. Then backup and replace the following file:

/usr/share/centrifydc/lib/hpux64/snckrb5.so 


****Note****

If you get the following error while starting up SAP 720 with our snckrb5.so, please download the attachment and replace the snckrb5.so file again:

N *** ERROR => SncPGSSImportName()==SNCERR_GSSAPI [sncxxall.c 2630]
N GSS-API(maj): An invalid name was supplied
N GSS-API(min): Can't open/find configuration file (dce / krb)
N Import of a name failed

This error is due to previous version of snckrb5.so that resulted in the inability to resolve some of the symbols by the Centrify krb5 library. Centrify has fixed this with the snckrb5.so attached to this KB.
Attachments:

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.