6 Replies Latest reply on Mar 31, 2014 5:25 PM by Pedro José Barbero Iglesias Branched from an earlier discussion.

    Re: AD Kerberos Integration Issue

    Pedro José Barbero Iglesias

      Hi guys!!

       

      Have you solved this error yet? I get the same problem than you...

       

      I am using Windows 7 for my local Bladelogic Console installation.Do you know if it has any issues related to it?

       

      Regards.

       

      Screenshot.png

        • 1. Re: AD Kerberos Integration Issue
          Bill Robinson

          is this still an issue?

           

          if so, what's in the appserver log when this happens ?

          what's in the blappserv_krb5.conf, blappserv_login.conf ?

           

          and does this happen only for this user on this workstation ?

          • 2. Re: Re: AD Kerberos Integration Issue
            Pedro José Barbero Iglesias

            First of all, I am very sorry for my delay in getting back to you.

             

            Yes it is Bill...

             

            Here the log of App server when I try to connect to...

             

            [26 Mar 2014 16:46:53,708] [Authentication-Service-Thread-2] [WARN] [::180.5.62.11] [Appserver] ADK Error from client: No valid credentials provided (Mechanism level: Integrity check on decrypted field failed (31)) User: x099707@AD.PRODUBANES.CORP

            [26 Mar 2014 16:46:53,711] [Authentication-Service-Thread-2] [INFO] [x099707@AD.PRODUBANES.CORP::180.5.62.11] [Appserver] user authentication failed: x099707@AD.PRODUBANES.CORP

            [26 Mar 2014 16:46:53,711] [Authentication-Service-Thread-2] [INFO] [x099707@AD.PRODUBANES.CORP::180.5.62.11] [Appserver] Authentication Connection closed

             

            And here, the content of files:

             

            Screenshot_01.png

             

             

            An answering to your last question, this happening to me on all the Workstations I have installed the console on... But there some Citrix Presentation Servers where it is installed and working... but I don't have an easy access to them. The really curious thing is I have followed the documentation from the beginning to the end.... I have also have to solve the problem with TGT ticket modifying the Windows registry...but it doesn't work.

             

            Thanks in advanced.

            • 3. Re: Re: AD Kerberos Integration Issue
              Bill Robinson

              which registry key did you set:

               

              HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters

              or

              KEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\

               

              for 2008, win7 it should be the former, for xp it should be the latter.

              • 4. Re: Re: AD Kerberos Integration Issue
                Pedro José Barbero Iglesias

                Hi there Bill,

                 

                Here the information you requested.

                Screenshot_01.png

                I think everything looks great.

                 

                Thanks in advanced.

                • 5. Re: Re: AD Kerberos Integration Issue
                  Bill Robinson

                  did you reboot the client after making that change?

                   

                  that seemed to be the most popular root cause (missing the key) in my google search.  the message is a java/kerberos error, it's not specific to bsa.

                  • 6. Re: AD Kerberos Integration Issue
                    Pedro José Barbero Iglesias

                    Everyday Bill, it is my personal computer.

                     

                    But I think also you are right, it looks like it doesn't have nothing to with Bladelogic and yes with Windows 7.

                     

                    Don't worry about it, it doesn't matter I just wanted to set it up in my personal computer to follow the procedure from the beginning to the end in order to get expertise for doing it other servers. Bad choice.

                     

                    My best regards and thank you for your interesting on this issue.