During Kerberos Authentication With Oracle API Gateway 11.1.2, The Error "GSSException: Failure unspecified at GSS-API level (Mechanism level: Ticket not yet valid (33))" Is Reported
Last updated on AUGUST 22, 2017
Applies to:Oracle API Gateway - Version 11.1.2 and later
Information in this document applies to any platform.
When attempting to use Oracle API Gateway (OAG) 11.1.2.x with Kerberos and Active Directory, the following error occurs:
STEPS TO REPRODUCE
The issue can be reproduced at will with the following steps:
- Create an OAG-SERVER user in Active Dircetory (AD).
- Generate a keytab.
- From OAG policy studio, create a Kerberos principal.
- Create Kerberos services.
- Register a service.
- Add the Kerberos service to the service policy.
- Save and deploy
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms