OAM11gR2PS1- WNA Authentication Failing with java.net.SocketTimeoutException (Doc ID 1615670.1)

Last updated on OCTOBER 17, 2023

Applies to:

Symptoms

WNA Authentication failing even after Kinit authenticates ok.

$ kdestroy
kdestroy: No credentials cache found while destroying cache

$ kinit -V -k -t <PATH>/<KEYTAB_FILE>  HTTP/<HOSTNAME>@<AD_DOMAIN_NAME>

Authenticated to Kerberos v5

Kerberos debug shows-

>>> KdcAccessibility: reset
default etypes for default_tkt_enctypes: 23.
>>> KrbAsReq calling createMessage
>>> KrbAsReq in createMessage
>>> KrbKdcReq send: kdc=<AD_HOSTNAME> UDP:<PORT>, timeout=30000, number of retries =3, #bytes=159
>>> KDCCommunication: kdc=<AD_HOSTNAME> UDP:<PORT, timeout=30000,Attempt =1, #bytes=159
SocketTimeOutException with attempt: 1
>>> KDCCommunication: kdc=<AD_HOSTNAME> UDP:<PORT>, timeout=30000,Attempt =2, #bytes=159
<Jan 15, 2014 8:36:21 PM CST> <Error> <NAPLogger> <BEA-000000> <Mismatch should_be: <VALUE1> Mismatch response: <VALUE2>>
<Jan 15, 2014 8:36:32 PM CST> <Error> <NAPLogger> <BEA-000000> <Mismatch should_be: <VALUE3> Mismatch response: <VALUE4>>
SocketTimeOutException with attempt: 2
>>> KDCCommunication: kdc=<AD_HOSTNAME> UDP:<PORT>, timeout=30000,Attempt =3, #bytes=159
SocketTimeOutException with attempt: 3
>>> KrbKdcReq send: error trying<AD_HOSTNAME>:<PORT>
java.net.SocketTimeoutException: Receive timed out
       at java.net.PlainDatagramSocketImpl.receive0(Native Method)
       at java.net.PlainDatagramSocketImpl.receive(PlainDatagramSocketImpl.java:145)
       at java.net.DatagramSocket.receive(DatagramSocket.java:725)
       at sun.security.krb5.internal.UDPClient.receive(NetClient.java:197)
       at sun.security.krb5.KrbKdcReq$KdcCommunication.run(KrbKdcReq.java:361)

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.