Skip to Content
0
Former Member
Jul 11, 2014 at 11:04 AM

Kerberos not working for only 1 sub-domain

56 Views

Hi All,

We have successfully integrated Portal with Multiple LDAP Domains (1

internal and 3 external).There are 4 sub-domains for the 1 internal

domain.

We have configured Kerberos for all the internal sub-domains, however

its NOT working for only 1 sub-domain.

Erros found in the log:

-------------------------------------------------------------------------------------------------------------------------

Can't map exception.

[EXCEPTION]

com.sap.engine.services.security.exceptions.BaseLoginException: Cannot authenticate the user.

Caused by: javax.security.auth.login.LoginException: Trigger SPNEGO authentication.

at com.sap.security.core.server.jaas.SPNegoLoginModule.initialStateException(SPNegoLoginModule.java:366)

at com.sap.security.core.server.jaas.SPNegoLoginModule.login(SPNegoLoginModule.java:173)

at com.sap.engine.services.security.login.LoginModuleLoggingWrapperImpl.login(LoginModuleLoggingWrapperImpl.java:254)

at com.sap.engine.services.security.login.ModulesProcessAction.run(ModulesProcessAction.java:66)

... 64 more

------------------------------------------------------------------------------------------------------------------------

NegoEx token found in authorization header during SPNEGO authentication.

------------------------------------------------------------------------------------------------------------------------

Can't map exception.

[EXCEPTION]

com.sap.engine.services.security.exceptions.BaseLoginException: Cannot authenticate the user

Caused by: javax.security.auth.login.LoginException: NegoEx token received in authorization header.

at com.sap.security.core.server.jaas.SPNegoLoginModule.failedAuthenticationException(SPNegoLoginModule.java:351)

at com.sap.security.core.server.jaas.SPNegoLoginModule.checkAuthorizationHeaderToken(SPNegoLoginModule.java:450)

at com.sap.security.core.server.jaas.SPNegoLoginModule.processAuthorizationHeader(SPNegoLoginModule.java:473)

at com.sap.security.core.server.jaas.SPNegoLoginModule.login(SPNegoLoginModule.java:157)

at com.sap.engine.services.security.login.LoginModuleLoggingWrapperImpl.login(LoginModuleLoggingWrapperImpl.java:254)

at com.sap.engine.services.security.login.ModulesProcessAction.run(ModulesProcessAction.java:66)

... 64 more

-------------------------------------------------------------------------------------------------------------------------

Any help would be highly appreciated.

Thank you,

Regards,

Disha