Please refer to this articles parent page for more information.
Description
This error can be seen in full as follows:
Exception: krb_error 0 Do not have keys of types listed in default_tkt_enctypes available; only have keys of following type: No error
KrbException: Do not have keys of types listed in default_tkt_enctypes available; only have keys of following type:
at sun.security.krb5.internal.crypto.EType.getDefaults(EType.java:280)
at sun.security.krb5.KrbAsReqBuilder.build(KrbAsReqBuilder.java:261)
at sun.security.krb5.KrbAsReqBuilder.send(KrbAsReqBuilder.java:315)
at sun.security.krb5.KrbAsReqBuilder.action(KrbAsReqBuilder.java:361)
at sun.security.krb5.internal.tools.Kinit.<init>(Kinit.java:219)
at sun.security.krb5.internal.tools.Kinit.main(Kinit.java:113)
Resolution
There are two possible causes for this error
1) The principal name requested doesn't match the principal name in the keytab. Check that the principal name in the Spotfire Kerberos configuration matches that in the keytab.
Check the principal name in the Spotfire server configuration
Check the SPN contained within the keytab:
<installation root>\jdk\bin\ktab.exe -l -e -t -k spotfire.keytab
This will give output similar to below:
KVNO Timestamp Principal
---- ----------------- ----------------------------------------------------------------------------
0 12/31/69, 4:00 PM HTTP/spotfire.example.com@MYDOMAIN.COM (18:AES256 CTS mode with HMAC SHA1-96)
2) If obtaining a ticket on the command line via kinit, this can also happen if the command line parameters are the wrong way around.
The correct command is kinit.exe -k -t spotfire.keytab