SAP Knowledge Base Article - Preview

3022565 - Received KRB-ERR message: error code 13 KDC_ERR_BADOPTION - Principal Propagation with Kerberos fails

Symptom

  • A Principal Propagation scenario with Kerberos between SAP BTP and an on-premise system via Cloud Connector is not working.
  • In the Cloud Connector logs (ljs_trace), the following error is found:

#ERROR#com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler#tunnel-client-21-1#0xc639dfa9#Unable to generate authorization token
com.sap.core.connectivity.spi.sso.BackendTokenGenerationException: Could not create SPNego token
...
Caused by: com.sap.security.krb5.exceptions.KrbException: Received KRB-ERR message: error code 13 [KDC_ERR_BADOPTION (KDC cannot accommodate requested option)]


Read more...

Environment

  • SAP Business Technology Platform, Neo environment
  • SAP Cloud Connector

Product

SAP Business Technology Platform all versions

Keywords

btp, scp, sap cp, scc, pp, user, login, sso , KBA , BC-NEO-SEC-IAM , Authentication, Authorization(Cloud Platform Neo) , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.