I would need to know what is a recommended way how to configure SAP Single Sign-On in clustered environment. If SNC configuration from Primary Cluster Node is used on Secondary Cluster Node, it is not possible to start SAP system, it returns the following error:
N The internal Adapter for the loaded GSS-API mechanism identifies as:
N Internal SNC-Adapter (Rev 1.1) to SAP Netweaver Single Sign-On v1.xN SncInit(): found: snc/identity/as=p:CN=SAPServiceBW1@SKANSKA.ORGN *** ERROR => SncPAcquireCred()==SNCERR_GSSAPI [sncxxall.c 1459]
N GSS-API(maj): No credentials were supplied
N Couldn't acquire ACCEPTING credentials for
N
N name="p:CN=SAPServicePRD@DOMAIN.TLD"
N FATAL SNCERR -- Accepting Credentials: "sapsso" (0x0003) not available!
N (debug hint: default acceptor = "p:CN=DummyCredential")
N <<- SncInit()==SNCERR_GSSAPI
N sec_avail = "false"
It seems that at least file pse.zip is binded to hardware/hostname. How to remedy such a situation? Do you recommend to create two independent
configurations (sec directories) that are used (e.g. using symbolic link) on a particular cluster node when SAP service is active on it? Or is it possible to use just one SNC configuration (pse.zip file) - how is it possible to create such a configuration in such a case?