OBIEE 11.1.1.7 SSO for Windows Native Clients Error 401-UnAuthorized issue.

I configured OBIEE to work with AD authenticator and AD authentication works fine. My AD users can login with their credential. I am having issues with Kerberos authentication. My keytab looks fine and kinit is successful too and do not have any duplicate SPNs. After configuring Kerberos, "I am getting error 401 Unauthorized" .
I have an AD user bisystem which I generated SPN and key tab looks fine. My other AD users belong to AD group "Technical".
What should be the principal-name in weblogic.xml?
I have put <principal-name>bisytem</principal-name>
<principal-name>Technical</principal-name> in weblogic.xml

from bi_server.out:
default etypes for default_tkt_enctypes: 17 23 3 1 23.
Pre-Authenticaton: find key for etype = 3
AS-REQ: Add PA_ENC_TIMESTAMP now
>>> EType: sun.security.krb5.internal.crypto.DesCbcMd5EType
>>> KrbAsReq calling createMessage
>>> KrbAsReq in createMessage
>>> KrbKdcReq send: xxxx timeout=30000, number of retries =3, #bytes=270
>>> KDCCommunication: kdc=xxxx #bytes=270
>>>DEBUG: TCPClient reading 106 bytes
>>> KrbKdcReq send: #bytes read=106
>>> KrbKdcReq send: #bytes read=106
>>> KdcAccessibility: remove xxxxx
>>> KDCRep: init() encoding tag is 126 req type is 11
>>>KRBError:
         sTime is Wed Apr 15 13:32:41 EDT 2015 1429119161000
         suSec is 553936
         error code is 14
         error Message is KDC has no support for encryption type
         realm is xxxx
         sname is krbtgt/xxxxx
         msgType is 30
                [Krb5LoginModule] authentication failed
KDC has no support for encryption type (14)
Any insight???

Similar Messages

Not being recognized by Itunes for Windows. 0xE8000001 Error

not being recognized by Itunes for Windows. 0xE8000001 Error
I get this message when trying to sync my IPOD Touch 16GB after upgrading to 7.5. I have tried to remove 7.5 and reinstall 7.4 and still the same problem. I have it connected to the USB on my motherboard. I have even changed the USB connection around. I have tried everything I can think of and all of the instructions I can find on this site. HELP!!
Dmar

Hey dmar713,
The iPod touch requires USB 2.0, check the speed of the USB port.
http://docs.info.apple.com/article.html?artnum=307091
If the USB port is not causing the issue, it may be an application conflict.
http://docs.info.apple.com/article.html?artnum=302538
Jason

Microsoft releases fix for Windows Update corruption errors

See ZDnet article Microsoft releases fix for Windows Update corruption errors found @
http://www.zdnet.com/microsoft-releases-fix-for-windows-update-corruption-errors-7000026582/
The Microsoft KB article is found @
http://support.microsoft.com/kb/947821
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

Hi Rick,
Really thanks for your sharing.
This will definitly help others in this forum.
Kate Li
TechNet Community Support

When accessing Intranet sites that use SSL Certificates issued by our internal PKI, FF for Windows give an error of "improperly formatted DER-encoded message"

When accessing Intranet sites with that have SSL Certificates issued by our internal PKI, FF for Windows gives an error messsage - An error occurred during a connection to myshaw. security library: improperly formatted DER-encoded message. (Error code: sec_error_bad_der)
Chrome and IE work fine. This is a new PKI using the SHA-2 signature algorithm.

Hi Guigs2,
From the other post you link too, I can confirm that both the Root and Subordinate CA have been commissioned with the:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CertSvc\Configuration\IssuingCA\CSP\AlternateSignatureAlgorithm = 1
registry key set. As can be seen above, the Signature algorithm on an issued certificate is RSASSA-PSS. This is been Microsoft suggested deployment IF you do not wish to support either XP or Windows 2003 machine and lower. In fact, I believe the option has been around since Windows 2008, however, there were of course, a lot more XP machines back then.
The obvious answer is that we would like to maintain the updated algorithm, AND see support for it added for Firefox. I think you will see a LOT more posts like this as people deploy more 2012 PKI infrastructure supporting only Windows 7 and up. Heavens, we may well be forced to Chrome or even back to IE!!! Whilst I do not what to necessary open up other potential vulnerabilities, for the sake of testing, what do you mean by disabling mozilla:pkix?

Installation issue: Authentication: AWS for Windows NTLM returns error

We are rebuilding our STG with Plumtree 5.0.4. After I installed Optional Enterprise Web Components, the Authentication: AWS for Windows NTLM returns error. I am wondering if anyone has the similar experience and could help to fix the issue. I have located error with the virtual directory but unable to fix it.
Symptons
When try to access
http://servername/ntaws/RemoteSynchService.asp, got 404 page/folder not found error.
Log Error:
The message returned from the IIS creation of virtual directory ntaws on the Default Web Site
web site for D:\Program Files\plumtree\ptntaws\5.0\webapp\ntaws\www is:
<message>
Error
Error
</message>
Solution Tried:
1. Manually Create the virtual directory - didn't work
2. Reinstalled the Optionsal web service AWS portal, and re-migrate the ntaws.pte - didn't work.
I appreciate your help.
Hao Pan
[email protected]

from bi_server.out:
default etypes for default_tkt_enctypes: 17 23 3 1 23.
Pre-Authenticaton: find key for etype = 3
AS-REQ: Add PA_ENC_TIMESTAMP now
>>> EType: sun.security.krb5.internal.crypto.DesCbcMd5EType
>>> KrbAsReq calling createMessage
>>> KrbAsReq in createMessage
>>> KrbKdcReq send: xxxx timeout=30000, number of retries =3, #bytes=270
>>> KDCCommunication: kdc=xxxx #bytes=270
>>>DEBUG: TCPClient reading 106 bytes
>>> KrbKdcReq send: #bytes read=106
>>> KrbKdcReq send: #bytes read=106
>>> KdcAccessibility: remove xxxxx
>>> KDCRep: init() encoding tag is 126 req type is 11
>>>KRBError:
 sTime is Wed Apr 15 13:32:41 EDT 2015 1429119161000
 suSec is 553936
 error code is 14
 error Message is KDC has no support for encryption type
 realm is xxxx
 sname is krbtgt/xxxxx
 msgType is 30
 [Krb5LoginModule] authentication failed
KDC has no support for encryption type (14)
Any insight???

SSO and Windows Native Mode Benefits?

Hi All
We currently run EP7 SP8 and I need to find out what the benefits are if we move to Win2000 or Win2003 Native mode. Also if we can use SSO with Win2000 or Win 2003.
Does anyone have any information which would help me weigh up the pros and cons of implementing this.
Many Thanks for your help
Phil

thank you for your reply,
Metalink note 277382.1 is a good document how to configure OID External Authentication Plugin for Authentication Via Microsoft Active.
configure OID for import users and External Authentication Plugin are a prerequisites steps for SSO WNA. but WNA must more other steps not descript in this metalink note
N.B: WNA "Windows Native Authentication" is a feature for Oracle SSO which enables Microsoft Internet Explorer users to automatically authenticate to their web applications using their desktop credentials.
thanks

I can not upgrade to quicktime 7.7.3 for windows vista. Error message says there is a problem with the program installer. Any clue as to how to get around this.

I can not download quicktime 7.7.3 for windows vista. The error message says that there is a problem with the windows installer. Any clues?

The error message says that there is a problem with the windows installer.
What's the precise text of the message, please? (There's a few different ones I can think of that you might be getting.)

Installed iTunes 10.2.1 for Windows (64-bit), Error 7 Windows 998

Hello
After updating iTunes 10.2.1 for Windows (64-bit)I am getting the dreaded iTunes was not installed correctly, Please reinstall iTunes. With error 7 (Windows error 998) popups.
Tried already all the known uninstall/install/repair suggestions. Tried runnng as administrator or changing permissions. Tried disabling Bonjour Service.
Until now nothing has repaired it.
Is there a way to fix this? Can it be an Adobe update?
Is there a way to get an older version?

I had the same problem. I tried doing a system restore to a day or 2 before i did the update. The restore was successful but the itunes problem remained. After that I went into the control panel, selected itunes and clicked the repair tab.
It now works fine for me. The only other step I took was to copy my itunes folder into another location in case anything went wrong. Once the repair was complete I simply replaced the new empty itunes folder with my previous one.
Hope this is of some help.

During Itunes download for windows 7 64bit, error message says "Service Apple Mobile device" failed to start

During Itunes installation on my Windows 7 64 bit computer.. I get the following message which won't allow installation:
Service "Apple Mobile Device" failed to start. Verify that you have sufficient privileges to start system services.
This occurred after an itunes update to my computer that produced a corrupted msvcr80.dll file. So I deleted Itunes and reinstalled.

Redo the install, following the below procedure. However, when you re-install Itunes, right click and run the install as administrator. For Win 7, I think you have to hold down the shift key when you right click and then "run as administrator" will be an option.
Go to Control Panel > Add or Remove Programs (Win XP) or Programs and Features (later)
Remove all of these items in the following order:
iTunes
Apple Software Update
Apple Mobile Device Support (if this won't uninstall move on to the next item)
Bonjour
Apple Application Support
Reboot, download iTunes, then reinstall, either using an account with administrative rights, or right-clicking the downloaded installer and selecting Run as Administrator.
The uninstall and reinstall process will preserve your iTunes library and settings, but ideally you would back up the library and your other important personal documents and data on a regular basis. See this user tip for a suggested technique.
Please note:
Some users may need to follow all the steps in whichever of the following support documents applies to their system. These include some additional manual file and folder deletions not mentioned above.
HT1925: Removing and Reinstalling iTunes for Windows XP
HT1923: Removing and reinstalling iTunes

Bonjour for windows gives this error - You do not have sufficient access...

I installed Bonjour for windows on a PC running XP. When I run the Bonjour app from windows I can see the printer I wish to connect to. It is shared off of my G3 server. When I try to connect I get the following error,
"You do not have sufficient access to your computer to connect to the selected printer"
I have done some research through Apple's info database and found,
http://docs.info.apple.com/article.html?artnum=302408
I followed the instructions and still I get the same error. I have rebooted the PC deleted all the printers under the printer window. But no luck. I found a similar request by another apple forum user. His issue was the same but he was using 'Parallels' emulator. But no solution was provided.
Any suggestions?

Well this is what I've done to date to try to resolve this issue.
I uninstalled Bonjour for Windows from my PC. I checked Apples support pages dealing with Bonjour for Windows (BfW). As suggested I deleted all printers in my printer window, (to delete all possible print Queues). I updated my Windows to the latest patch for XP. I reinstalled BfW, with the XP Firewall turned on. It is suggested that BfW will make the necessary changes to the XP firewall to allow traffic going through port 5353. I have tried more than one printer off of my G3 and I double checked my external router port restrictions, and I turned off the firewall on my G3, shared mt printers in OS X, and even turned on windows file sharing. I even updated my G3 to 10.4.8
I pinged my G3 from my XP machine it's there. Also I can see the G3 with it's printers when I browse the network from the XP box. Also I'm on the same local subnet 192.168.2.x
The only thing I have not done yet is see if it is possible to ping a bonjour host (my G3) from a bonjour client (XP box). That would at least verifiy the 5353ports.
Anyone have a bonjour utility to do that? Probably have to run in a Windows enviroment. Or can a ping packet be directed to use a particular port?

Cannot (re-)install itunes (64) for windows 8. get error 7 (Windows error 193)

I've used itunes for itunes for quite some time before making some hardware change (cpu and motherboard). The OS, like before, is Windows 8. But now each time that I try it seems to install up to and including the final "finish" in the process. After that it gives me the above msg suggestint that I rinstall. After a START of the computer there are complains about "apple" routines that cause problems.
I hope that there is an itunes user who n help.
Zeeghee (Siegfried Schulte, [email protected])

Hello Zeeghee,
Thanks for using Apple Support Communities.
For more information on this, take a look at:
iTunes for Windows: "Error 7" message when opening iTunes
http://support.apple.com/kb/ts3074
Best of luck,
Mario

I have 64bit windows and install proper one for windows and get error saying wron i tunes and to reinstall the right one

i cant get itunes to install also get error after 1 use that itunes does not work again

For general advice see Troubleshooting issues with iTunes for Windows updates.
The steps in the second box are a guide to removing everything related to iTunes and then rebuilding it which is often a good starting point unless the symptoms indicate a more specific approach. Review the other boxes and the list of support documents further down page in case one of them applies.
Your library should be unaffected by these steps but there is backup and recovery advice elsewhere in the user tip.
The section Install missing components has advice on breaking down the iTunes installer into the individual .msi files which might prove useful if AAS won't install normally.
tt2

Installing Image Mastering API v2.0 (IMAPIv2.0) for Windows XP (KB932716) error

I keep receiving this error when trying to run or save the download for Image Mastering API v2.0 (IMAPIv2.0) for Windows XP (KB932716):
Internet Explorer cannot download ...XP-KB932716-v2-x86-ENU.exe from download.microsoft.com.
The connection with the server was reset
I have tried the download numerous times. Any Ideas?

It works, but a newer update is available anyways, that includes Blu-ray media support.
See KB952011 explaining that Image Mastering API v2.0 is included in the
download Windows Feature Pack for Storage 1.0
IMAPI_XP_SRV2003_x86.exe

Windows 2012 Group Policy Option missing for Windows 7 Client

Hi there,
We have a deployment with a windows 2012 DC and various Windows 7 clients.
I am trying to set up a group policy on the 2012 DC to configure the Windows 7 clients and basically disable the Aero feature.
The "Do not allow desktop composition" is the one I need to enable and this would sit under Admin Templates > Windows Components > Desktop Windows Manager.
In Windows 2012 Group Policy editor this does not show...does anyone know how I can do this to a remote Windows 7 machine from 2012 DC?
Note if it helps on a windows 7 machine you can also disable the service "Desktop Window Manager Session Manager”
to achieve the same thing BUT when looking through the Group Policy again I can’t seem to find this!!
Thanks for any help,
Steve

> In Windows 2012 Group Policy editor this does not show...does anyone
> know how i can do this to a remote Windows 7 machine from 2012 DC?
Install RSAT and edit on W7. Or copy all W7 admx/adml templates to the
central store.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

User profile creation problem for windows 7 clients with eap-fast

Hi All,
In our clients locations we implemented eap-fast authentication with domain integration in ACS for wlan users.Every thing working fine.We are facing problem with windows 7 laptops, in which client utility is not available to configure the user profiles.
In xp laptops client utility softwares are available with all makes, but with win 7 utilitys are not coming by default......
So what are options and available sourses for creating user profile with EAP-FAST in windows 7 laptops.
Any free univarsal client utility is available for windows 7 laptop.
Please guide me..............
-Subhash

Windows 7 should be able to do EAP-fast by default. If not you could download the latest Anyconnect client that also has the Cisco wireless supplicant in it.
HTH,
Steve
Sent from Cisco Technical Support iPad App

OBIEE 11.1.1.7 SSO for Windows Native Clients Error 401-UnAuthorized issue.

Similar Messages

Maybe you are looking for