Troubleshooting Kerberos Configuration
I receive the following error when I execute the web service connector: org.apache.axis2.AxisFault: Error in building kerberos token.
Possible reasons for this error are:
The format of the JAAS context is incorrect.
There are no Kerberos login modules configured for the specified principal name.
The absolute path of the keytab file specified in the JAAS context is incorrect.
The encryption algorithm in the keytab file is different from the one used by KDC.
The JDK version you are using is lower than JDK 1.7_45. The keytab configuration is certified on JDK 1.7_45 version and above.
I receive the following error when I execute the web service connector: Pre-authentication information was invalid (24) KrbException: Identifier doesn't match expected value (906).
Possible causes for this error are:
The truststore or the keytab file is corrupt. In such cases,
Software AG recommends that you recreate these files and place them in a location that is not frequently accessed.
Your system time and the time in the system that hosts the KDC are not the same. The clocks in these two systems cannot be out of sync for by more than 300 seconds, which is the default clockskew.
I receive the following error when I request for Kerberos delegation by setting delegation to kerberos: Kerberos delegatable credentials do not exist.
Possible reasons for this error is: The requestDelegatableToken parameter in pub.client:http service is not set to true.