SAP Knowledge Base Article - Preview

2671418 - Test SAML SSO to HANA connection failed in Central Management Console (CMC)

Symptom

  • After configuration of SAML SSO to HANA from BI , clicking the "Test Connection" in BI Platform Central Management Console (CMC), it returns
    "Connection Failed: The test of the HANA SSO ticket used to log onto the HANA DB has failed due to: [10]: authentication failed. (FWM 02133)" error.
  • Senario 1
    In HANA indexserver trace file, the following errors output:

        Authentication ManagerAcceptor.cpp(00040) : Prepare authentication: adding available methods
        Authentication Manager.cpp(00095) : getMechs: provided mechanism=SPNEGO
        Authentication Manager.cpp(00095) : getMechs: provided mechanism=Kerberos 5
        Authentication Method.cpp(00409) : Prepare authentication: added method GSS
        Authentication Method.cpp(00409) : Prepare authentication: added method SAML
        Authentication Method.cpp(00409) : Prepare authentication: added method SAPLogon
        Authentication Method.cpp(00409) : Prepare authentication: added method SessionCookie
        Authentication Method.cpp(00409) : Prepare authentication: added method SCRAMSHA256
        Authentication ManagerAcceptor.cpp(00272) : Injecting logon name into method:
        Authentication SAMLAuthenticator.cpp(01830) : SAML Response Destination ignored
        Authentication SAMLAuthenticator.cpp(00687) : PSE Store Manager initialized, try to obtain PSE store for SAML
        Authentication SAMLAuthenticator.cpp(00693) : No in-memory PSE store for SAML - fallback to system trust store

  • Senario 2
    In HANA indexserver trace file, the following errors output:

    Authentication MethodSAML.cpp(00137) : unsuccessful login attempt with SAML ticket!
    Authentication ManagerAcceptor.cpp(00286) : evaluate was not successful for method: SAML
    Authentication MethodGSS.cpp(00080) : GSS isApplicableToken with input length 3437
    Authentication ManagerAcceptor.cpp(00277) : Method is applicable: SAPLogon
    Authentication ManagerAcceptor.cpp(00279) : Injecting logon name into method:
    Authentication SAPLogonManager.cpp(00282) : PSE Store Manager initialized, try to obtain PSE store for SAPLOGON
    Authentication SAPLogonManager.cpp(00290) : Using file-based PSE store for SAPLOGON
    Authentication SAPLogonManager.cpp(00296) : Store chosen for assertion ticket validation: saplogon.pse
    Authentication SAPLogonManager.cpp(00420) : The base64 decode of the received ticket failed. SSO_RC return value: 1281
    Authentication SAPLogonManager.cpp(00429) : Use SSO Validation PSE >>>saplogon.pse<<<
    Authentication MethodSAPLogon.cpp(00149) : unsuccessful login attempt with SAPLogon/SAPAssertion ticket!
    Authentication ManagerAcceptor.cpp(00286) : evaluate was not successful for method: SAPLogon
    Authentication MethodGSS.cpp(00080) : GSS isApplicableToken with input length 79
    Authentication ManagerAcceptor.cpp(00277) : Method is applicable: SCRAMSHA256
    Authentication ManagerAcceptor.cpp(00279) : Injecting logon name into method:
    Authentication ManagerAcceptor.cpp(00290) : evaluate was successful for method: SCRAMSHA256
    Authentication ManagerAcceptor.cpp(00333) : follow up request needed
    Authentication ManagerAcceptor.cpp(00359) : Method is applicable: SCRAMSHA256
    Authentication ManagerAcceptor.cpp(00368) : evaluate was not successful for method: SCRAMSHA256
    Authentication Connection.cc(03976) : [PRE AUTHENTICATION] logon name:
    Authentication Connection.cc(04043) : [POST AUTHENTICATION] logon name:
    Authentication Connection.cc(03213) : exception during authentication: ERROR [SQL-10] authentication failed

 


Read more...

Environment

SAP BusinessObjects Business Intelligence Platform 4.1.x or 4.2.x

Product

SAP NetWeaver 7.5

Keywords

4.1, 4.2, SPNEGO, Kerberos, FWM 02133, 02133 , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.