SAP SSO getting snc error context expired (4285909)

SAP SSO getting smc error context expired

The issue is not related to QAS or Our Sap SSO plugin. It is related to Kerberos

External security software that can be used with SAP R/3's Secure
Network Communications (SNC) may impose a lifetime restriction on
security contexts that are used for protecting the communication.
This is a security feature that is required by certain protocols such
as the Kerberos 5 gssapi mechanism (rfc1964). For security reasons
a security context becomes unusable when it expires.
 

RESOLUTION:

Renew your kerberos ticket:

1 - On Windows client you can  hit ctrl+alt+delete keys lock your workstation. Next  unlock tge  workstation and enter in password

OR

1 - On a Unix system that is a  QAS client do the following command:

/opt/quest/bin/vastool kinit <username or service name>

Then enter in the password for the account

2 - To view the kerberos tickets do the following command:

/opt/quest/bin/vastool klist

WORKAROUND:

Increase the length of the ticket lifetime in AD security policy to be longer