SYMPTOM:
Sporadically, Integrated Authentication (Kerberos) displays the following error message in Strategy Web 9.2.1
Sample Code/Error
No valid credentials provided (Mechanism level: Receive timed out)
In Strategy Web error log
Sample Code/Error
<record reset="true">
<package>com.Strategy.webapi</package>
<level>SEVERE</level>
<miliseconds>1318432399517</miliseconds>
<timestamp>10/12/2011 16:13:19:517</timestamp>
<thread>0</thread>
<class>CDSSXMLServerSessionImpl</class>
<method>getTokenString</method>
<message>c (Mechanism level: Connection reset) (com.Strategy.webapi.MSTRWebAPIException)</message>
<exception>GSSException: Failure unspecified at GSS-API level (Mechanism level: Connection reset)
at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:668)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:230)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:162)
at com.Strategy.webapi.KerberosSession.getTicket(Unknown Source)
at com.Strategy.webapi.CDSSXMLServerSessionImpl.getTokenString(Unknown Source)
at
CAUSE:
This issue could be caused by multiple reasons. One of them maybe that there is a connection problem with the KDC (Active Directory) and it times out.
ACTION:
If you have multiple KDC (Active Directory) machines in krb5.ini file, instead of adding one KDC information, add all the cluster nodes and its port number. If you only have one KDC machine, contact your System Administrator to research why the connection is being lost.
NOTE:
Configuring clustered KDC is out of the scope of Strategy Technical Support.
Third Party Software Installation WARNING
The third-party product(s) discussed in this technical note is manufactured by vendors independent of Strategy. Strategy makes no warranty, express, implied or otherwise, regarding this product, including its performance or reliability.
