TM1 10.2.2 integrated Login Kerberos

[carsten]

Hello,
I want to use the integrated login with kerberos but I get the following error. Can anybody help ? It seems to me that the server is the right one and the ticket or login is correct. I configured the system exactly as mentioned here:
https://www.ibm.com/developerworks/libr ... m-page678/

Thanks

[JGSS_DBG_CRED] http-9510-2 JAAS config: interactive login? yes
[JGSS_DBG_CRED] http-9510-2 Retrieving Kerberos creds from cache for principal=null
[JGSS_DBG_CRED] http-9510-2 No Kerberos creds in cache for principal USER
[JGSS_DBG_CRED] http-9510-2 Doing Kerberos login for principal USER@MY-DOMAIN.COM
[JGSS_DBG_CRED] http-9510-2 Doing Kerberos login for principal: USER@MY-DOMAIN.COM
[JGSS_DBG_CRED] http-9510-2 Kerberos login complete
[JGSS_DBG_CRED] http-9510-2 Login successful
[JGSS_DBG_CRED] http-9510-2 kprincipal : USER@MY-DOMAIN.COM
[JGSS_DBG_CRED] http-9510-2 USER@MY-DOMAIN.COM added to Subject
[JGSS_DBG_CRED] http-9510-2 Kerberos ticket for USER@MY-DOMAIN.COM added to Subject
[JGSS_DBG_CRED] http-9510-2 No keys to add to Subject for USER@MY-DOMAIN.COM
com.ibm.security.krb5.KrbException, status code: 7
message: :tm1s/server.my-domain.com@MY-DOMAIN.COM
at com.ibm.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:5)
at com.ibm.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:90)
at com.ibm.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:115)
at com.ibm.security.krb5.internal.r.e(r.java:84)
at com.ibm.security.krb5.internal.r.d(r.java:196)
at com.ibm.security.krb5.Credentials.acquireSvcCreds(Credentials.java:215)
at com.ibm.security.jgss.mech.krb5.n.a(n.java:375)
at com.ibm.security.jgss.mech.krb5.n.initSecContext(n.java:575)
at com.ibm.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:205)
at com.ibm.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:401)
at com.applix.tm1.TM1Server.getClientToken(TM1Server.java:2517)
at com.applix.tm1.TM1Server.PerformSingleSignOn(TM1Server.java:2570)
at com.applix.tm1.TM1Server.connectIntegrated(TM1Server.java:2444)
at com.applix.tm1.TM1Bean.openConnection(TM1Bean.java:267)
at com.ibm.cognos.tm1.datasource.javaapi.TM1Connection.openConnection(TM1Connection.java:94

[carsten]

it seems that i fixed issue. no exception anymore. But despite I still have a "login failed, please try again" message

[mattgoff]

it seems that i fixed issue. no exception anymore. But despite I still have a "login failed, please try again" message

I have an open PMR (73855,49R,000) with IBM on exactly this problem (and have since December 2014). Support just scheduled a meeting for Oct 30 (!!!) with someone I assume is on the dev team. If I get anywhere, I'll post an update.

Matt

[carsten]

Thx for your answer.
Now i found in Tm1web.log more details:

2015-10-12 12:55:47,896 [http-9510-7] ERROR () com.ibm.cognos.tm1.datasource.javaapi.TM1Connection - Exception Error: com.applix.tm1.TM1Val incompatible with com.applix.tm1.TM1Server
Stack Trace: java.lang.ClassCastException: com.applix.tm1.TM1Val incompatible with com.applix.tm1.TM1Server
at com.applix.tm1.TM1Server.PerformSingleSignOn(TM1Server.java:2631)
at com.applix.tm1.TM1Server.connectIntegrated(TM1Server.java:2444)
at com.applix.tm1.TM1Bean.openConnection(TM1Bean.java:267)
at com.ibm.cognos.tm1.datasource.javaapi.TM1Connection.openConnection(TM1Connection.java:94)
at com.ibm.cognos.tm1.web.services.TM1AppService.loginSeverEx(TM1AppService.java:330)
at com.ibm.cognos.tm1.web.services.TM1AppService.createServerSession(TM1AppService.java:308)

[BrianL]

If you're seeing java exceptions like that, it's a bug and should be filed with IBM support.