Unable to execute kinit command to test keytab file in Kerberos authentication: Exception "krb_error 0 Do not have keys of types listed in default_tkt_enctypes available"

Unable to execute kinit command to test keytab file in Kerberos authentication: Exception "krb_error 0 Do not have keys of types listed in default_tkt_enctypes available"

book

Article ID: KB0082644

calendar_today

Updated On:

Products Versions
Spotfire Server All Versions

Description

You may come across this error while executing the kinit command on Spotfire server for Kerberos Authentication: "krb_error 0 Do not have keys of types listed in default_tkt_enctypes available".
-------------------------------------------------------------------
D:\ProgramFiles\tibco\tss\7.9\jdk\jre\bin〉kinit.exe -k -t D:\ProgramFiles\tibco\tss\7.9\jdk\jre\iib\security\spotfire.keytab
Exception: krb_error 0 Do not have keys of types listed in default_tkt_enctypes
available; only have keys of following type: No error
krbException: Do not have keys of types listed in default_tkt_enctypes available
only have keys of following type:
at sun-security.krb5. internal.crypto . EType.ge t Defaults〈EType-Java:280
at sun.security.krb5.KrbAs ReqBuilder. build CKrbAs ReqBuilder.java:261>
at sun.security.krb5.KrbAs ReqBuilder.send<KrblsReqBuilder.java:315
at sun.security.krb5.KrbAs ReqBuilder.action KrbAs ReqBuilder.java:361
at sun.security.krb5.internal.tools.Kinit.<init><Kinit.java:219)
at sun.security.krb5-intern al.tools.Kinit.na in 〈Kinit.java:113〉
-----------------------------

Environment

All Supported Operating System

Resolution

This error may occur if any of the below parameter in the kinit command is missing:
- keytab file
- HTTP/<fully qualified hostname>[:<port>]@<realm>

Provide the correct parameters while executing the kinit command.
Example kinit command:
> <spotfire_server_installation dir>\jdk\jre\bin\kinit.exe -k -t <keytab file> HTTP/<fully qualified hostname>[:<port>]@<realm>

Issue/Introduction

Unable to execute kinit command to test keytab file in Kerberos authentication: Exception "krb_error 0 Do not have keys of types listed in default_tkt_enctypes available"

Additional Information

https://docs.tibco.com/pub/spotfire_server/7.10.0/doc/html/TIB_sfire_server_tsas_admin_help/GUID-44AE656F-53C9-41AA-A2EC-A0ED7A6DDFD4.html