During Kerberos Authentication With Oracle API Gateway 11.1.2, The Error "GSSException: Failure unspecified at GSS-API level (Mechanism level: Ticket not yet valid (33))" Is Reported

(Doc ID 1580295.1)

Last updated on AUGUST 22, 2017

Applies to:

Oracle API Gateway - Version 11.1.2 and later
Information in this document applies to any platform.


When attempting to use Oracle API Gateway (OAG) 11.1.2.x with Kerberos and Active Directory, the following error occurs:



The issue can be reproduced at will with the following steps:

  1. Create an OAG-SERVER user in Active Dircetory (AD).
  2. Generate a keytab.
  3. From OAG policy studio, create a Kerberos principal.
  4. Create Kerberos services.
  5. Register a service.
  6. Add the Kerberos service to the service policy.
  7. Save and deploy



Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms