When trying to set up integrated authentication with Strategy Web, users receive the following error message in the web interface:
Failure unspecified at GSS-API level (Mechanism level: Unable to delegate initiator's credential to SPN = MSTRSVRSvc/:)
The Web Application server log will record an exception similar to:
[] [] Failure unspecified at GSS-API level (Mechanism level: Unable to delegate initiator's credential to SPN = MSTRSVRSvc/aix0887:34958) (com.Strategy.webapi.MSTRWebAPIException) 0x0: [GSSException: Failure unspecified at GSS-API level (Mechanism level: Unable to delegate initiator's credential to SPN = MSTRSVRSvc/aix0887:34958)
at com.Strategy.webapi.KerberosSession.getTicket(Unknown Source)
at com.Strategy.webapi.CDSSXMLServerSessionImpl.getTokenString(Unknown Source)
at com.Strategy.webapi.CDSSXMLServerSessionImpl.CreateSession(Unknown Source)
at com.Strategy.webapi.CDSSXMLServerSessionImpl.CreateSessionEx(Unknown Source)
at com.Strategy.web.objects.WebIServerSessionImpl.createSession(Unknown Source)
at com.Strategy.web.objects.WebIServerSessionImpl.createSession(Unknown Source)
...........
Strategy Technical Support has seen the above error message when the machine hosting the Intelligence Server machine has not been either registered with in the Domain Controller or the delegation settings were not set correctly.
If the Intelligence Server machine is not already in the active domain controller, add the machine making sure it is trusted for delegation.
