BlackBerry Forums Support Community               

Closed Thread
LinkBack Thread Tools
Old 02-25-2014, 06:33 PM   #1 (permalink)
New Member
Join Date: Feb 2014
Model: 9600
Carrier: rogers
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default SSO - Kerberos - error_code: KDC_ERR_BADOPTION

Please Login to Remove!

Hi All,

I am trying to setup SSO Kerberos authentication on BES 5. I have read through the instructions and completed the steps required. When user tired to connect to protected site they get promoted for credentials. I checked the MDAT log and found the following error

<2014-02-25 13:50:42.803 EST>:[229]:<MDS-CS_SE100620_MDS-CS_1>:<DEBUG>:<LAYER = SCM, impersonation cannot be done on the host of this url, e=GSSException: Failure unspecified at GSS-API level (Mechanism level: KDC can't fulfill requested option
        Error code: 13
        Error message: null
        Client name: null
        Client realm: null
        Client time: null
        Server name: HTTP/
        Server realm:
        Server time:
I looked at this article KB23457 Browser is prompting for credentials after MDS Connection Service has been configured for Integrated Authentication[/url] Browser is still requesting credentials after MDS Connection Service has been configured for Integrated Authentication, but it did not apply to me as in I have the following option "Trust this user for delegation to any service (Kerberos only)" enabled in AD for the Delegation service account. Can anyone help with identifying what wrong here?


Last edited by juniorra : 02-25-2014 at 06:35 PM.
Closed Thread

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads for: SSO - Kerberos - error_code: KDC_ERR_BADOPTION
Thread Thread Starter Forum Replies Last Post
SSO (single Sign On) BES 5 SP2 - Authentication to Intranets Pikey BES Admin Corner 11 07-29-2011 12:39 PM
SSO Intergration for LCS hit.singh BES Admin Corner 0 02-19-2011 11:56 PM
Enabling Application Server SSO (Single Sign on)on the BES MobileMind BES Admin Corner 4 09-16-2009 05:12 PM
Configure MDS to authenticate using Kerberos kjarrodc BES Admin Corner 0 07-25-2008 05:57 PM
Kerberos vs NTLM authentication andersj6 Developer Forum 0 02-23-2007 04:08 PM

Copyright 2004-2014
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.