BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 02-25-2014, 05:33 PM   #1 (permalink)
New Member
 
Join Date: Feb 2014
Model: 9600
PIN: N/A
Carrier: rogers
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default SSO - Kerberos - error_code: KDC_ERR_BADOPTION

Please Login to Remove!

Hi All,

I am trying to setup SSO Kerberos authentication on BES 5. I have read through the instructions and completed the steps required. When user tired to connect to protected site they get promoted for credentials. I checked the MDAT log and found the following error

Code:
<2014-02-25 13:50:42.803 EST>:[229]:<MDS-CS_SE100620_MDS-CS_1>:<DEBUG>:<LAYER = SCM, impersonation cannot be done on the host of this url, e=GSSException: Failure unspecified at GSS-API level (Mechanism level: com.dstc.security.kerberos.KerberosError: KDC can't fulfill requested option
KrbError:
        Error code: 13
        Error message: null
        Client name: null
        Client realm: null
        Client time: null
        Server name: HTTP/test.com
        Server realm: fake.test.com
        Server time:
I looked at this article KB23457 Browser is prompting for credentials after MDS Connection Service has been configured for Integrated Authentication[/url] Browser is still requesting credentials after MDS Connection Service has been configured for Integrated Authentication, but it did not apply to me as in I have the following option "Trust this user for delegation to any service (Kerberos only)" enabled in AD for the Delegation service account. Can anyone help with identifying what wrong here?

Thanks

Last edited by juniorra : 02-25-2014 at 05:35 PM.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads for: SSO - Kerberos - error_code: KDC_ERR_BADOPTION
Thread Thread Starter Forum Replies Last Post
SSO (single Sign On) BES 5 SP2 - Authentication to Intranets Pikey BES Admin Corner 11 07-29-2011 11:39 AM
SSO Intergration for LCS hit.singh BES Admin Corner 0 02-19-2011 10:56 PM
Enabling Application Server SSO (Single Sign on)on the BES MobileMind BES Admin Corner 4 09-16-2009 04:12 PM
Configure MDS to authenticate using Kerberos kjarrodc BES Admin Corner 0 07-25-2008 04:57 PM
Kerberos vs NTLM authentication andersj6 Developer Forum 0 02-23-2007 03:08 PM





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.