OAM11R2: During WNA Setup Kinit Returns Error : krb_error 6 Client not found in Kerberos database
(Doc ID 1523575.1)
Last updated on SEPTEMBER 25, 2023
Applies to:
Oracle Access Manager - Version 11.1.1.5.0 and laterInformation in this document applies to any platform.
Goal
On Windows 2008R2 with the command
>java.exe -Dsun.security.krb5.debug=true sun.security.krb5.internal.tools.Kinit -k -t <PATH>keytab.service HTTP/<FQDN_HOSTNAME>@<AD_DOMAIN_NAME>
>kinit<FQDN_HOSTNAME>@<AD_DOMAIN_NAME>
Password for HTTP/<FQDN_HOSTNAME>@<AD_DOMAIN_NAME> :
Exception: krb_error 6 Client not found in Kerberos database (6) Client not found in Kerberos database
( both commands are doing the same)
bring the error information : "Client not found in Kerberos database" - How to fix this?
Detailed error information:
######################
>>> reading response from kdc
>>> KDCRep: init() encoding tag is 126 req type is 11 <- connection to Active Directory are be established
>>>KRBError:
sTime is Tue Jan 22 15:19:55 CET 2013 1358864395000
suSec is 983203
error code is 6
error Message is Client not found in Kerberos database <- messages are being sent from the Active Directory
realm is<AD_DOMAIN_NAME>
sname is krbtgt/E<AD_DOMAIN_NAME>
msgType is 30
Exception: krb_error 6 Client not found in Kerberos database (6) Client not found in Kerberos database
KrbException: Client not found in Kerberos database (6)
at sun.security.krb5.KrbAsRep.(KrbAsRep.java:66)
at sun.security.krb5.KrbAsReq.getReply(KrbAsReq.java:448)
at sun.security.krb5.internal.tools.Kinit.sendASRequest(Kinit.java:306)
at sun.security.krb5.internal.tools.Kinit.(Kinit.java:237)
at sun.security.krb5.internal.tools.Kinit.main(Kinit.java:107)
Caused by: KrbException: Identifier doesn't match expected value (906)
at sun.security.krb5.internal.KDCRep.init(KDCRep.java:133)
at sun.security.krb5.internal.ASRep.init(ASRep.java:58)
at sun.security.krb5.internal.ASRep.(ASRep.java:53)
at sun.security.krb5.KrbAsRep.(KrbAsRep.java:50)
... 4 more
Solution
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Goal |
Solution |