AD login configuration issue on window

[Former Member]

Hello All,

The krb5.ini file is not exist on C:\WINDOWS\.

I need to create a new one. When I try to create a keytab I get this error.

Failed to add XXXX to keytab.

KrbException: Could not load configuration file C:\WINDOWS\krb5.ini (The syste

cannot find the file specified)

        at sun.security.krb5.PrincipalName.<init>(PrincipalName.java:359)

        at sun.security.krb5.PrincipalName.<init>(PrincipalName.java:424)

        at sun.security.krb5.internal.tools.Ktab.addEntry(Ktab.java:218)

        at sun.security.krb5.internal.tools.Ktab.main(Ktab.java:124)

Caused by: KrbException: Could not load configuration file C:\WINDOWS\krb5.ini

The system cannot find the file specified)

        at sun.security.krb5.Config.<init>(Config.java:140)

        at sun.security.krb5.Config.getInstance(Config.java:82)

        at sun.security.krb5.PrincipalName.<init>(PrincipalName.java:356)

        ... 3 more

     .

     .

     .

        ... 5 more

Any Idea how can create a krb5.ini file.

Thanks

Reza

[Reagan · Accepted solution]

Do a search for the file on the server and if you are unable to find the file then create the file C:\WINDOWS\krb5.ini manually and see if that helps.

You will need to add the contents into the file after creating it.

Check this wiki for the default entries.

Setting up Manual Java Authentication - Business Intelligence (BusinessObjects) - SCN Wiki

Let us know how it went. Just curious to know

Regards

RB

[divyanshu_srivastava3 · Accepted solution]

Perfect RB..

best way to search..

[Reagan · Accepted solution]

Disclaimer: I am not an expert in the Kerberso and AD configuration but I believe this note can help you 1429745 - How to automatically create a krb5.ini with specific information for my AD environment

Regards

RB

[Former Member · Accepted solution]

Hell,

Thanks for alle reply.

At last I did create the krb5.ini file with necessary information,

libdefaults]
default_realm = domainname.com
dns_lookup_kdc = true
dns_lookup_realm = true
default_tgs_enctypes = rc4-hmac
default_tkt_enctypes = rc4-hmac
udp_preference_limit = 1

[realms]

dominname.com  = {
kdc = usernam.domanname.com
default_domain = domaniname.com
}

Thanks

Reza

[Former Member]

Hello Reza

First of all can you please tell me your NW System version and Windows AD server version? You need to use correct SPNego configuration procedure for your systems. Currently recommended procedure is as per sap note 1488409 New SPNego Implementation. Check and confirm if your system version is conversant with the sap note.

Thanks,

Tapan

[Former Member]

Hello Tapan,

Thanks for reply.

My problem is solved and my SSO connection to AD is Works,

My problem was when I did tried to create a keytab,  I get this error:

Failed to add XXXX to keytab.

KrbException: Could not load configuration file C:\WINDOWS\krb5.ini (The syste

cannot find the file specified)

I did create a krb5.ini file add that in C:\WINDOWS , create a keytab and made connection with SPNEGO.

Thanks Again for reply.

Reza

[Former Member]

Hello Reza

That's a great news!!

Please put the thread under "Answered" status.

Cheers,

Tapan

[Former Member]

Hello,

For today's reader, in 2016, don't use RC4 as Kerberos encryption algorithm !

See:

Kerberos(SSO): throw RC4 away, adopt AES !

Regards,

Stéphane;

[Sriram2009]

Hi Reza

Could you refer the AD configuration SCN link

http://scn.sap.com/community/sso/blog/2012/08/17/how-to-configure-sap-netweaver-single-sign-on-for-s...

To perform the debug  1372493 - Enabling Kerberos debugging for Java application servers

Common errors - 1794675 - Common Kerberos Error messages and their Explanation

BR

SS

[divyanshu_srivastava3]

Copy krb5.ini file in windows folder and try again.