My Oracle Support Banner

Failure Unspecified at GSS-API Level (Mechanism level: Specified version of key is not available (44)) With Weblogic Server 10.3.4, With Kerberos KDC and With Sun JDK 6 update 21 or JDK 6 update 22 (Doc ID 1298660.1)

Last updated on DECEMBER 11, 2017

Applies to:

Oracle Weblogic Server - Version 10.3.4 and later
Information in this document applies to any platform.
***Checked for relevance on 19-Oct-2012***

Symptoms

WebLogic Server 10.3.4 is configured to use Kerberos KDC. WebLogic is installed on Suse Linux Server with Java SE JDK 6u22. Kerberos KDC is installed on Windows 2008 Server R2. keytab file is created using ktpass.exe (on Windows). The keytab file is then exported on Linux Server and joined with existing files using ktutil tool.

While WebLogic Serwer reads a token from Kerberos, an exception occurs:

Failure unspecified at GSS-API level (Mechanism level: Specified version of key is not available (44))

The cause of the problem is in Java SE JDK 6u22. When JDK 6u11 is used, everything works correctly (no exception is thrown). Full stack trace:

####<Jan 19, 2011 5:59:21 PM CET> <Debug> <SecurityAtn> <esf-t-auth.ib> <AdminServer>
<[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <> <> <> <1295456361362> <BEA-000000>
<Exception com.bea.common.security.internal.utils.negotiate.NegotiateTokenException:
GSSException: Failure unspecified at GSS-API level (Mechanism level: Specified version of key is not available (44))

com.bea.common.security.internal.utils.negotiate.NegotiateTokenException:
GSSException: Failure unspecified at GSS-API level (Mechanism level: Specified

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.