TIBCO Spotfire Server: Keberos : Do not have keys of types listed in default_tkt_enctypes available

Please refer to this articles parent page for more information.

Description

This error can be seen in full as follows:

Exception: krb_error 0 Do not have keys of types listed in default_tkt_enctypes available; only have keys of following type: No error
KrbException: Do not have keys of types listed in default_tkt_enctypes available; only have keys of following type:
at sun.security.krb5.internal.crypto.EType.getDefaults(EType.java:280)
at sun.security.krb5.KrbAsReqBuilder.build(KrbAsReqBuilder.java:261)
at sun.security.krb5.KrbAsReqBuilder.send(KrbAsReqBuilder.java:315)
at sun.security.krb5.KrbAsReqBuilder.action(KrbAsReqBuilder.java:361)
at sun.security.krb5.internal.tools.Kinit.<init>(Kinit.java:219)
at sun.security.krb5.internal.tools.Kinit.main(Kinit.java:113)

Resolution

There are two possible causes for this error

1) The principal name requested doesn't match the principal name in the keytab. Check that the principal name in the Spotfire Kerberos configuration matches that in the keytab.

Check the principal name in the Spotfire server configuration



Check the SPN contained within the keytab:

<installation root>\jdk\bin\ktab.exe -l -e -t -k spotfire.keytab

This will give output similar to below:

KVNO Timestamp Principal
---- ----------------- ----------------------------------------------------------------------------
0 12/31/69, 4:00 PM HTTP/spotfire.example.com@MYDOMAIN.COM (18:AES256 CTS mode with HMAC SHA1-96)

2) If obtaining a ticket on the command line via kinit, this can also happen if the command line parameters are the wrong way around. 

The correct command is kinit.exe -k -t spotfire.keytab