Configuring The WNA Fallback Authentication in a Multi Domain Using Multi Forest Setup Fails With The Error : Checksum Failed (Doc ID 2151908.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Access Manager - Version 11.1.1.3.0 and later
Information in this document applies to any platform.

Symptoms

On : OAM version 11.1.2.3.5, While configured the WNA Fallback Authentication in a multi domain using multi forest setup, it failed with the following error:

 GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)
  at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:788)
  at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)
  at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)
  at sun.security.jgss.spnego.SpNegoContext.GSS_acceptSecContext(SpNegoContext.java:871)
  at sun.security.jgss.spnego.SpNegoContext.acceptSecContext(SpNegoContext.java:544)
  at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)
  at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)
  at oracle.security.am.plugin.authn.SPNEGOLoginModule$1.run(SPNEGOLoginModule.java:139)

  at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
Caused By: KrbException: Checksum failed
  at sun.security.krb5.internal.crypto.ArcFourHmacEType.decrypt(ArcFourHmacEType.java:102)
  at sun.security.krb5.internal.crypto.ArcFourHmacEType.decrypt(ArcFourHmacEType.java:94)
  at sun.security.krb5.EncryptedData.decrypt(EncryptedData.java:177)
  at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:278)
  at sun.security.krb5.KrbApReq.(KrbApReq.java:144)
  at sun.security.jgss.krb5.InitSecContextToken.(InitSecContextToken.java:108)
  at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:771)

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms