Re: SSO Setup Issue - Error

I want to change the password for the Service Principal IBM i Kerberos
Authentication through IBM Navigator for i

I can't seem to find a way to do this ?

Am I just not looking hard enough

Thanks you

Don






From: "Don Brown via MIDRANGE-L" <midrange-l@xxxxxxxxxxxxxxxxxx>
To: "Midrange Systems Technical Discussion"
<midrange-l@xxxxxxxxxxxxxxxxxx>
Cc: "Don Brown" <DBrown@xxxxxxxxxx>, "MIDRANGE-L"
<midrange-l-bounces@xxxxxxxxxxxxxxxxxx>
Date: 20/07/2021 04:21 PM
Subject: Re: SSO Setup Issue - Error
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxxxxxxxx>



I did find in the service logs the following informaiton


# WARNING# 2021/07/20 14:02:04.668 AEST# Thread: 67#
com.ibm.iaccess.base.AcsSystemConfig.getAuthKerberos
(AcsSystemConfig.java:1983) [/4.dat]
SNAP **** Exception!
SNAP class com.ibm.as400.access.AS400SecurityException: Kerberos
service ticket could not be retrieved.

SNAP Caused by: class org.ietf.jgss.GSSException: Failure unspecified

at GSS-API level (Mechanism level: 80090303=InitializeSecurityContext()
len=16384 ctx=00000000 SEC_E_TARGET_UNKNOWN)
SNAP

Which indicates it could not obtain a service ticket but I can find
anything meaningful as to why .

Don



From: "Don Brown via MIDRANGE-L" <midrange-l@xxxxxxxxxxxxxxxxxx>
To: midrange-l@xxxxxxxxxxxxxxxxxx
Cc: "Don Brown" <DBrown@xxxxxxxxxx>
Date: 20/07/2021 04:02 PM
Subject: SSO Setup Issue - Error
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxxxxxxxx>



I am trying to set up SSO on a V7R3 IBMi

The box does not have support - it is only used for testing and is being
decommissioned

This is just a proof of concept / test for SSO

I have followed the document
https://www.ibm.com/support/pages/how-configure-eim-and-nas-using-ibm-navigator-i




All the verification has succeeded but when I try to log on using kerberos


authentication I get the error;

MSGKRB001 - Kerberos error for system <ip-address>
(Failure unspecified at GSS-API level (Mechanism
level:80090303=InitiateSecurityContext() len=16384 ctx=00000000
SEC_E_TARGET_UNKNOWN))

Can anyone point me in the right direction to understand / resolve this
issue.

Thank you in advance.

Don


--
This email has been scanned for computer viruses. Although MSD has taken
reasonable precautions to ensure no viruses are present in this email, MSD

cannot accept responsibility for any loss or damage arising from the use
of this email or attachments..