WNA Fails on AIX with Logfile Error: org.ietf.jgss.GSSException, major code: 3, minor code: 0 major string: Invalid name minor string: No target name (Doc ID 1096682.1)

Last updated on JULY 01, 2016

Applies to:

Oracle Application Server Single Sign-On - Version 10.1.4.3 and later
IBM AIX on POWER Systems (64-bit)
IBM AIX on POWER Systems (32-bit)
***Checked for relevance on 21-NOV-2013***

Symptoms

After following Note 345025.1 'SSO/WNA Quick Start Guide' to setup Windows Native Authentication on AIX server, when users access the partner application, users receive a SSO SignOn error screen with:
Error: Authentication failed. Please try again

The OC4J~OC4J_SECURITY~default_island~1 shows:

10/04/12 17:19:11 SSOLoginServlet.init: SSO server started
10/04/12 17:19:11 Initiating the Kerberos authenticator.
10/04/12 17:19:11 Kerberos service name: HTTP@ssoserver.abc.com
10/04/12 17:19:11 Fallback support: true
10/04/12 17:19:11 Windows domain separator char: $
10/04/12 17:19:11 JAZN Config object: [JAZNConfig file:/u01/product/oracle/10.1.4/j2ee/OC4J_SECURITY/application-deployments/sso/]
10/04/12 17:19:11 Getting creds for HTTP/ssoserver.abc.com@ABC.COM...
10/04/12 17:19:11 KerberosAuthenticator: GSSException raised in constructor - org.ietf.jgss.GSSException, major code: 11, minor code: 0
major string: General failure, unspecified at GSSAPI level
minor string: Cannot get credential for principal service HTTP/ssoserver.abc.com@ABC.COM
10/04/12 17:19:11 org.ietf.jgss.GSSException, major code: 11, minor code: 0
major string: General failure, unspecified at GSSAPI level
minor string: Cannot get credential for principal service HTTP/ssoserver.abc.com@ABC.COM
10/04/12 17:19:11 at com.ibm.security.jgss.i18n.I18NException.throwGSSException(I18NException.java:24)
10/04/12 17:19:11 at com.ibm.security.jgss.mech.krb5.p.b(p.java:64)
10/04/12 17:19:11 at com.ibm.security.jgss.mech.krb5.p.a(p.java:302)
10/04/12 17:19:11 at com.ibm.security.jgss.mech.krb5.p.<init>(p.java:76)
10/04/12 17:19:11 at com.ibm.security.jgss.mech.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:4)
...


Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms