sreenath205
Programmer
Hi,
I have the following combination,Weblogic(weblogic 9.2),Jrockit(jrockit-R27.5.0-jdk1.5.0_14).Generate the keytab and while trying to login using sso after starting the server i get the following error
<May 30, 2012 2:43:01 PM BST> <Notice> <Stdout> <000000> <default etypes for default_tkt_enctypes: 3 1 23 16 17.>
<May 30, 2012 2:43:01 PM BST> <Notice> <Stdout> <000000> >> KrbAsReq calling createMessage>
<May 30, 2012 2:43:01 PM BST> <Notice> <Stdout> <000000> >> KrbAsReq in createMessage>
<May 30, 2012 2:43:01 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: kdc=pendcx64apac2.apac.dell.com UDP:88, timeout=30000, number of retries =3, #bytes=150>
<May 30, 2012 2:43:01 PM BST> <Notice> <Stdout> <000000> >> KDCCommunication: kdc=pendcx64apac2.apac.dell.com UDP:88, timeout=30000,Attempt =1, #bytes=150>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: #bytes read=152>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: #bytes read=152>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KDCRep: init() encoding tag is 126 req type is 11>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>KRBError:>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <sTime is Wed May 30 14:43:02 BST 2012 1338385382000>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <suSec is 944259>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <error code is 25>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <error Message is Additional pre-authentication required>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <realm is APAC.DELL.COM>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <sname is krbtgt/APAC.DELL.COM>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <eData provided.>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <msgType is 30>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>Pre-Authentication Data:>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <PA-DATA type = 11>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <PA-ETYPE-INFO etype = 23>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>Pre-Authentication Data:>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <PA-DATA type = 2>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <PA-ENC-TIMESTAMP>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>Pre-Authentication Data:>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <PA-DATA type = 15>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <AcquireTGT: PREAUTH FAILED/REQUIRED, re-send AS-REQ>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>KrbAsReq salt is APAC.DELL.COMHTTPPENSPTSIT01>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <Pre-Authenticaton: find key for etype = 23>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <AS-REQ: Add PA_ENC_TIMESTAMP now>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbAsReq calling createMessage>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbAsReq in createMessage>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: kdc=pendcx64apac2.apac.dell.com UDP:88, timeout=30000, number of retries =3, #bytes=233>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KDCCommunication: kdc=pendcx64apac2.apac.dell.com UDP:88, timeout=30000,Attempt =1, #bytes=233>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: #bytes read=98>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: #bytes read=98>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KDCRep: init() encoding tag is 126 req type is 11>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>KRBError:>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <sTime is Wed May 30 14:43:02 BST 2012 1338385382000>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <suSec is 178639>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <error code is 52>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <error Message is Response too big for UDP, retry with TCP>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <realm is APAC.DELL.COM>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <sname is krbtgt/APAC.DELL.COM>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <msgType is 30>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: kdc=pendcx64apac2.apac.dell.com TCP:88, timeout=30000, number of retries =3, #bytes=233>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>DEBUG: TCPClient reading 1664 bytes>
Checksum failed !<May 30, 2012 2:43:02 PM BST>
<Notice> <Stdout> <000000> >> KrbKdcReq send: #bytes read=1664>
I have tried the following to resolve this,
1.The KEYTAB is generated using jdk 1.6
2.crypto used is rc4-hmac
Any clue on how to resolve this is much appreciated.
I have the following combination,Weblogic(weblogic 9.2),Jrockit(jrockit-R27.5.0-jdk1.5.0_14).Generate the keytab and while trying to login using sso after starting the server i get the following error
<May 30, 2012 2:43:01 PM BST> <Notice> <Stdout> <000000> <default etypes for default_tkt_enctypes: 3 1 23 16 17.>
<May 30, 2012 2:43:01 PM BST> <Notice> <Stdout> <000000> >> KrbAsReq calling createMessage>
<May 30, 2012 2:43:01 PM BST> <Notice> <Stdout> <000000> >> KrbAsReq in createMessage>
<May 30, 2012 2:43:01 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: kdc=pendcx64apac2.apac.dell.com UDP:88, timeout=30000, number of retries =3, #bytes=150>
<May 30, 2012 2:43:01 PM BST> <Notice> <Stdout> <000000> >> KDCCommunication: kdc=pendcx64apac2.apac.dell.com UDP:88, timeout=30000,Attempt =1, #bytes=150>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: #bytes read=152>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: #bytes read=152>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KDCRep: init() encoding tag is 126 req type is 11>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>KRBError:>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <sTime is Wed May 30 14:43:02 BST 2012 1338385382000>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <suSec is 944259>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <error code is 25>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <error Message is Additional pre-authentication required>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <realm is APAC.DELL.COM>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <sname is krbtgt/APAC.DELL.COM>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <eData provided.>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <msgType is 30>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>Pre-Authentication Data:>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <PA-DATA type = 11>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <PA-ETYPE-INFO etype = 23>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>Pre-Authentication Data:>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <PA-DATA type = 2>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <PA-ENC-TIMESTAMP>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>Pre-Authentication Data:>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <PA-DATA type = 15>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <AcquireTGT: PREAUTH FAILED/REQUIRED, re-send AS-REQ>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>KrbAsReq salt is APAC.DELL.COMHTTPPENSPTSIT01>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <Pre-Authenticaton: find key for etype = 23>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <AS-REQ: Add PA_ENC_TIMESTAMP now>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbAsReq calling createMessage>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbAsReq in createMessage>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: kdc=pendcx64apac2.apac.dell.com UDP:88, timeout=30000, number of retries =3, #bytes=233>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KDCCommunication: kdc=pendcx64apac2.apac.dell.com UDP:88, timeout=30000,Attempt =1, #bytes=233>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: #bytes read=98>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: #bytes read=98>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KDCRep: init() encoding tag is 126 req type is 11>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>KRBError:>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <sTime is Wed May 30 14:43:02 BST 2012 1338385382000>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <suSec is 178639>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <error code is 52>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <error Message is Response too big for UDP, retry with TCP>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <realm is APAC.DELL.COM>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <sname is krbtgt/APAC.DELL.COM>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> <msgType is 30>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >> KrbKdcReq send: kdc=pendcx64apac2.apac.dell.com TCP:88, timeout=30000, number of retries =3, #bytes=233>
<May 30, 2012 2:43:02 PM BST> <Notice> <Stdout> <000000> >>DEBUG: TCPClient reading 1664 bytes>
Checksum failed !<May 30, 2012 2:43:02 PM BST>
<Notice> <Stdout> <000000> >> KrbKdcReq send: #bytes read=1664>
I have tried the following to resolve this,
1.The KEYTAB is generated using jdk 1.6
2.crypto used is rc4-hmac
Any clue on how to resolve this is much appreciated.