Kerberos Plugin Error that Key Number does not Exist in Keytab File (Doc ID 2963148.1)

Last updated on JULY 23, 2023

Applies to:

Symptoms

Error received on the server:
2023-07-11T23:24:05.090042Z 7 [Note] [MY-013765] [Server] Plugin authentication_kerberos reported: 'Configured SPN:mysql/<AUTH_SERVER>@<REALM> user realm <REALM>, sending SPN and realm length is : 86'
2023-07-11T23:24:05.090104Z 7 [Note] [MY-013765] [Server] Plugin authentication_kerberos reported: 'Server kerberos plug-in writing data to client, length is : 86'
2023-07-11T23:24:05.092007Z 7 [Note] [MY-013765] [Server] Plugin authentication_kerberos reported: 'Server kerberos plugin has read from client, length is : 2164'
2023-07-11T23:24:05.092139Z 7 [Note] [MY-013765] [Server] Plugin authentication_kerberos reported: 'GSSAPI authentication error for user:<USERNAME>@<REALM> , Kerberos authentication:: accept security context failed. major code: 851968 minor code: 2529638956, Message from Library: Unspecified GSS failure. Minor code may provide more information. Request ticket server mysql/<AUTH_SERVER>@<REALM> kvno 4 not found in keytab; keytab is likely out of date. '
2023-07-11T23:24:05.092170Z 7 [Note] [MY-010926] [Server] Access denied for user '<USERNAME>'@'<REALM>' (using password: NO)

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.