GSSException: Failure Unspecified at GSS-API Level (Doc ID 1646018.1)

Last updated on APRIL 21, 2017

Applies to:

Oracle Access Manager - Version 11.1.2.1.0 and later
Information in this document applies to any platform.

Symptoms

WNA fails with below error

==========================


"Failure unspecified at GSS-API level (Mechanism level: Specified version of key is not available (44))[[
GSSException: Failure unspecified at GSS-API level (Mechanism level: Specified version of key is not available (44))"

 

 

OAM thrown below provided error in oam diagnostic log

======================================================

[2014-03-24T16:47:43.506-06:00] [oam_server2] [ERROR] [OAM-02010] [oracle.oam.controller] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 82f536aa38119915:210eb8eb:144f63141d4:-8000-00000000000009d6,0] [APP: oam_server#11.1.2.0.0] User account is locked. Authentication failed.
[2014-03-24T16:47:54.866-06:00] [oam_server2] [ERROR] [] [oracle.oam.engine.authn] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 82f536aa38119915:210eb8eb:144f63141d4:-8000-00000000000009dc,0] [APP: oam_server#11.1.2.0.0] Failure unspecified at GSS-API level (Mechanism level: Specified version of key is not available (44))[[
GSSException: Failure unspecified at GSS-API level (Mechanism level: Specified version of key is not available (44))
at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:741)
at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:323)
at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:267)

Caused by: KrbException: Specified version of key is not available (44)
at sun.security.krb5.EncryptionKey.findKey(EncryptionKey.java:516)
at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:260)
at sun.security.krb5.KrbApReq.<init>(KrbApReq.java:134)
at sun.security.jgss.krb5.InitSecContextToken.<init>(InitSecContextToken.java:79)
at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:724)

================================================================================================================
================================================================================================================
[2014-03-24T18:15:17.879-06:00] [oam_server2] [ERROR] [] [Coherence] [tid: Logger@9359673 3.7.1.1] [userId: <anonymous>] [ecid: 82f536aa38119915:-2ddd819c:144f696dfb3:-8000-0000000000000003,1:29771] [APP: oam_server#11.1.2.0.0] 2014-03-24 18:15:17.879/44.359 Oracle Coherence GE 3.7.1.1 <Error> (thread=[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)', member=n/a): Error while starting cluster: (Wrapped) java.io.IOException: Keystore was tampered with, or password was incorrect[[
at com.tangosol.util.Base.ensureRuntimeException(Base.java:288)
at com.tangosol.util.Base.ensureRuntimeException(Base.java:269)
at com.tangosol.net.ssl.SSLSocketProvider.setConfig(SSLSocketProvider.java:444)
at com.tangosol.net.SocketProviderFactory.createProvider(SocketProviderFactory.java:77)
at com.tangosol.net.SocketProviderFactory.ensureProvider(SocketProviderFactory.java:152)
at com.tangosol.coherence.component.net.Cluster.configureSockets(Cluster.CDB:28)
at com.tangosol.coherence.component.net.Cluster.onStart(Cluster.CDB:28)
at com.tangosol.coherence.component.net.Cluster.start(Cluster.CDB:11)
at com.tangosol.coherence.component.util.SafeCluster.startCluster(SafeCluster.CDB:3)
Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect
at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:771)
at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:38)
at java.security.KeyStore.load(KeyStore.java:1185)
Caused by: java.security.UnrecoverableKeyException: Password verification failed
at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:769)

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms