TIBCO Spotfire Server URL may not be accessible and Error out : Failure acquiring a Kerberos TGT for the service principal

TIBCO Spotfire Server URL may not be accessible and Error out : Failure acquiring a Kerberos TGT for the service principal

book

Article ID: KB0075384

calendar_today

Updated On:

Products Versions
Spotfire Server All Versions

Description

In a previously working Spotfire environment, the TIBCO Spotfire Server is suddenly no longer accessible. In the server logs (server.log), errors like the following are logged:
========= 
ERROR 2020-02-08T10:51:50,023+0100 [*Initialization*] web.context.ContextLoader: Context initialization failed
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'kerberosCredentialsManager' defined in ServletContext resource [/WEB-INF/applicationContext.xml]: Bean instantiation via constructor failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate
[com.spotfire.server.security.KerberosCredentialsManager]: Constructor threw exception; nested exception is 
com.spotfire.server.ServerInitializationException: Failure acquiring a Kerberos TGT for the service principal

     at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:279) ~
[spring-beans.jar:4.3.7.RELEASE]
========== 

Issue/Introduction

TIBCO Spotfire Server URL may not be accessible and Error out : Failure acquiring a Kerberos TGT for the service principal

Environment

All Supported OS

Resolution

If user was able to access Spotfire server URL earlier and suddenly it stops, it could be due to below reasons:

- If the service principal is wrong during startup. 
- This could be due to Active Directory (AD) hiccup and have prevented the Spotfire server from getting the "krbtgt" using the name in the principal.

To resolve this issue, you need to re-establish connection with Active Directory from Spotfire server.

Note: If this does not resolve the issue then check with your Active Directory administrator

You can also refer below KB articles for this type of error as there could be multiple reasons for this error, however this article explains when there is issue with earlier working Spotfire environment and when this error occurs.

https://support.tibco.com/s/article/Spotfire-server-fails-to-start-with-Failure-acquiring-a-Kerberos-TGT-for-the-service-principal-error-after-the-upgrade
https://support.tibco.com/s/article/Kerberos-authentication-may-fail-after-upgrading-to-Spotfire-10-3
https://support.tibco.com/s/article/Spotfire-server-may-fail-to-start-after-configuring-Kerberos-authentication
 

Additional Information