How To Fix SPN005 - Front-end control help

SAP Error Message - Details

• Message type: E = Error

• Message class: SPN - SPnego

• Message number: 005

• Message text: Front-end control help

&INTEGRATION&
The front-end control <ZK>SNCAX.DLL</> enables the <ZK>SPNego
Configuration</> transaction to validate Kerberos User Principal Names
and their Service Principal Names from the Active Directory database of
the Microsoft Windows domain controller.
&PREREQUISITES&
Each dialog instance, Web Dispatcher, reverse proxy, or application
server that end users need to access directly is represented as a
Service Principal Name. You need to have a unique assignment between
each Service Principal Name and exactly one Kerberos User Principal Name
in Active Directory.
You have installed the front-end control <ZK>SNCAX.DLL</>. For more
information, see SAP Note 1943266.

System Response

Consistency check executed

How to fix this error?

There must be a green indicator in the <ZH>User Principal Uniqueness</>
column for the Service Principal Name selected. This means that each
Service Principal Name is assigned to a single Kerberos User Principal
Name.
Choose the <ZH>Service Principal Name</> tab.
&RESULT&
If your consistency check was successful, you have created a token and
performed a successful token verification. The <ZH>Token Check</> column
displays a green indicator in the row of the respective Service
Principal Name.
If the consistency check was not successful, there is a red indicator.
Check the trace files to find more information.
If both indicators are green, SPNego tokens from Active Directory can be
validated successfully. If the users have been mapped, an SPNego
authentication is possible.
&SEE_ALSO&
For more information, choose the status indicator.

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Error message extract from SAP system. Copyright SAP SE.