[19013] in Kerberos_V5_Development
Kerberos Authentication not working for few Users with ERROR
daemon@ATHENA.MIT.EDU (ckhuntia)
Mon Sep 22 11:31:11 2014
Date: Sun, 21 Sep 2014 18:55:38 -0700 (PDT)
From: ckhuntia <ckhuntia@tibco.com>
To: krbdev@mit.edu
Message-ID: <1411350938454-41575.post@n3.nabble.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Hello Team,
Could you please provide some inputs on this error? Few of our users are not
able to access SQL Server DB through kerberos Auth. They are agetting
folloing ERROR.
------------------------------------------------------------------------------------------
com.microsoft.sqlserver.jdbc.SQLServerException: Integrated authentication
failed. ClientConnectionId:0e381a97-4705-4e9a-a1ec-0cffc72b2aad
at
com.microsoft.sqlserver.jdbc.SQLServerConnection.terminate(SQLServerConnection.java:1667)
at
com.microsoft.sqlserver.jdbc.KerbAuthentication.intAuthHandShake(KerbAuthentication.java:231)
at
com.microsoft.sqlserver.jdbc.KerbAuthentication.GenerateClientContext(KerbAuthentication.java:270)
at
com.microsoft.sqlserver.jdbc.SQLServerConnection.sendLogon(SQLServerConnection.java:2691)
at
com.microsoft.sqlserver.jdbc.SQLServerConnection.logon(SQLServerConnection.java:2234)
at
com.microsoft.sqlserver.jdbc.SQLServerConnection.access$000(SQLServerConnection.java:41)
at
com.microsoft.sqlserver.jdbc.SQLServerConnection$LogonCommand.doExecute(SQLServerConnection.java:2220)
at com.microsoft.sqlserver.jdbc.TDSCommand.execute(IOBuffer.java:5696)
at
com.microsoft.sqlserver.jdbc.SQLServerConnection.executeCommand(SQLServerConnection.java:1715)
at
com.microsoft.sqlserver.jdbc.SQLServerConnection.connectHelper(SQLServerConnection.java:1326)
at
com.microsoft.sqlserver.jdbc.SQLServerConnection.login(SQLServerConnection.java:991)
at
com.microsoft.sqlserver.jdbc.SQLServerConnection.connect(SQLServerConnection.java:827)
at
com.microsoft.sqlserver.jdbc.SQLServerDriver.connect(SQLServerDriver.java:1012)
at
com.spotfire.server.util.sql.DriverWrapper.connect(DriverWrapper.java:63)
at
com.spotfire.server.util.sql.KerberosDataSource$1.run(KerberosDataSource.java:321)
at
com.spotfire.server.util.sql.KerberosDataSource$1.run(KerberosDataSource.java:318)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:415)
at
com.spotfire.server.util.sql.KerberosDataSource.createConnection(KerberosDataSource.java:318)
at
com.spotfire.server.util.sql.KerberosDataSource.getConnection(KerberosDataSource.java:297)
at
com.spotfire.ws.im.ds.sql.JDBCDataSourceManager.getDelegatedKerberosConnection(JDBCDataSourceManager.java:1416)
at
com.spotfire.ws.im.ds.sql.JDBCDataSourceManager.getConnection(JDBCDataSourceManager.java:1357)
at
com.spotfire.ws.im.ds.sql.JDBCContextImpl.getConnection(JDBCContextImpl.java:117)
at com.spotfire.ws.im.ds.sql.SQLDataSource.init(SQLDataSource.java:206)
... 74 more
Caused by: GSSException: No valid credentials provided (Mechanism level:
Field is too long for this implementation (61))
at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:710)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at
com.microsoft.sqlserver.jdbc.KerbAuthentication.intAuthHandShake(KerbAuthentication.java:210)
... 96 more
Caused by: KrbException: Field is too long for this implementation (61)
at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:70)
at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:192)
at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:203)
at
sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:311)
at
sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:115)
at sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:442)
at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:641)
... 99 more
Caused by: KrbException: Identifier doesn't match expected value (906)
at sun.security.krb5.internal.KDCRep.init(KDCRep.java:143)
at sun.security.krb5.internal.TGSRep.init(TGSRep.java:66)
at sun.security.krb5.internal.TGSRep.<init>(TGSRep.java:61)
at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:55)
... 105 more
-------------------------------------------------------------------------------------
What is this error "Caused by: KrbException: Field is too long for this
implementation (61)" is for ?
--
View this message in context: http://kerberos.996246.n3.nabble.com/Kerberos-Authentication-not-working-for-few-Users-with-ERROR-Caused-by-KrbException-Field-is-too-lon-tp41575.html
Sent from the Kerberos - Dev mailing list archive at Nabble.com.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
