Kerberos Authentication not working for few Users with ERROR "Caused by: KrbException: Field is too long for this implementation (61)"

[ckhuntia]

Hello Team,
Could you please provide some inputs on this error? Few of our users are not
able to access SQL Server DB through kerberos Auth. They are agetting
folloing ERROR.

------------------------------------------------------------------------------------------
com.microsoft.sqlserver.jdbc.SQLServerException: Integrated authentication
failed. ClientConnectionId:0e381a97-4705-4e9a-a1ec-0cffc72b2aad
	at
com.microsoft.sqlserver.jdbc.SQLServerConnection.terminate(SQLServerConnection.java:1667)
	at
com.microsoft.sqlserver.jdbc.KerbAuthentication.intAuthHandShake(KerbAuthentication.java:231)
	at
com.microsoft.sqlserver.jdbc.KerbAuthentication.GenerateClientContext(KerbAuthentication.java:270)
	at
com.microsoft.sqlserver.jdbc.SQLServerConnection.sendLogon(SQLServerConnection.java:2691)
	at
com.microsoft.sqlserver.jdbc.SQLServerConnection.logon(SQLServerConnection.java:2234)
	at
com.microsoft.sqlserver.jdbc.SQLServerConnection.access$000(SQLServerConnection.java:41)
	at
com.microsoft.sqlserver.jdbc.SQLServerConnection$LogonCommand.doExecute(SQLServerConnection.java:2220)
	at com.microsoft.sqlserver.jdbc.TDSCommand.execute(IOBuffer.java:5696)
	at
com.microsoft.sqlserver.jdbc.SQLServerConnection.executeCommand(SQLServerConnection.java:1715)
	at
com.microsoft.sqlserver.jdbc.SQLServerConnection.connectHelper(SQLServerConnection.java:1326)
	at
com.microsoft.sqlserver.jdbc.SQLServerConnection.login(SQLServerConnection.java:991)
	at
com.microsoft.sqlserver.jdbc.SQLServerConnection.connect(SQLServerConnection.java:827)
	at
com.microsoft.sqlserver.jdbc.SQLServerDriver.connect(SQLServerDriver.java:1012)
	at
com.spotfire.server.util.sql.DriverWrapper.connect(DriverWrapper.java:63)
	at
com.spotfire.server.util.sql.KerberosDataSource$1.run(KerberosDataSource.java:321)
	at
com.spotfire.server.util.sql.KerberosDataSource$1.run(KerberosDataSource.java:318)
	at java.security.AccessController.doPrivileged(Native Method)
	at javax.security.auth.Subject.doAs(Subject.java:415)
	at
com.spotfire.server.util.sql.KerberosDataSource.createConnection(KerberosDataSource.java:318)
	at
com.spotfire.server.util.sql.KerberosDataSource.getConnection(KerberosDataSource.java:297)
	at
com.spotfire.ws.im.ds.sql.JDBCDataSourceManager.getDelegatedKerberosConnection(JDBCDataSourceManager.java:1416)
	at
com.spotfire.ws.im.ds.sql.JDBCDataSourceManager.getConnection(JDBCDataSourceManager.java:1357)
	at
com.spotfire.ws.im.ds.sql.JDBCContextImpl.getConnection(JDBCContextImpl.java:117)
	at com.spotfire.ws.im.ds.sql.SQLDataSource.init(SQLDataSource.java:206)
	... 74 more
Caused by: GSSException: No valid credentials provided (Mechanism level:
Field is too long for this implementation (61))
	at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:710)
	at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
	at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
	at
com.microsoft.sqlserver.jdbc.KerbAuthentication.intAuthHandShake(KerbAuthentication.java:210)
	... 96 more
Caused by: KrbException: Field is too long for this implementation (61)
	at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:70)
	at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:192)
	at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:203)
	at
sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:311)
	at
sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:115)
	at sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:442)
	at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:641)
	... 99 more
Caused by: KrbException: Identifier doesn't match expected value (906)
	at sun.security.krb5.internal.KDCRep.init(KDCRep.java:143)
	at sun.security.krb5.internal.TGSRep.init(TGSRep.java:66)
	at sun.security.krb5.internal.TGSRep.<init>(TGSRep.java:61)
	at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:55)
	... 105 more
-------------------------------------------------------------------------------------

What is this error "Caused by: KrbException: Field is too long for this
implementation (61)" is for ?




--
View this message in context: http://kerberos.996246.n3.nabble.com/Kerberos-Authentication-not-working-for-few-Users-with-ERROR-Caused-by-KrbException-Field-is-too-lon-tp41575.html
Sent from the Kerberos - Dev mailing list archive at Nabble.com.