Identity Management (MOSC)

MOSC Banner

OAM11.1.2.3 WNA - Getting NTLM token instead of kerberoes token from KDC server

edited Jan 12, 2018 6:46AM in Identity Management (MOSC) 2 commentsAnswered ✓

  Getting NTLM token instead of kerberoes token from KDC server . Browser asking for re-authentication .

KRB Debug Logs :

>>>Pre-Authentication Data:

  PA-DATA type = 19

  PA-ETYPE-INFO2 etype = 23

  PA-ETYPE-INFO2 salt = null

  PA-ETYPE-INFO2 s2kparams = null

AcquireTGT: PREAUTH FAILED/REQUIRED, re-send AS-REQ

>>>KrbAsReq salt is xxxx.xxxxxxxxx.COMHTTPerpdev5v2.xxxx.xxxxxxxxx.com

default etypes for default_tkt_enctypes: 23 1 3.

Pre-Authenticaton: find key for etype = 23

AS-REQ: Add PA_ENC_TIMESTAMP now

>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType

>>> KrbAsReq calling createMessage

>>> KrbAsReq in createMessage

>>> KrbKdcReq send: kdc=172.16.2.119 TCP:88, timeout=30000, number of retries =3, #bytes=271

>>> KDCCommunication: kdc=172.16.2.119 TCP:88, #bytes=271

>>>DEBUG: TCPClient reading 1606 bytes

>>> KrbKdcReq send: #bytes read=1606

>>> KrbKdcReq send: #bytes read=1606

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center