| Summary | This article clarifies the reason why the Artix security service fails to start when using the Kerberos adapter with a keytab file. |
|---|---|
| Environment |
Artix 4.*, Artix 5.* All Supported Operating Systems |
| Question/Problem Description | Artix security service fails to start with the Kerberos adapter when using a keytab file |
| Clarifying Information | |
| Error Message | (IT_JAVA_SERVER:19) F - Unhandled Java exception com.iona.isf.service.InitFailure: Could not load adapter. Reason: No Valid KDC found during iS2 startup. at com.iona.isf.plugins.server.v1.AuthenticationServiceImpl.<init>(Unknown Source) at com.iona.isf.plugins.server.v1.AuthenticationServiceFactory.createService(Unknown Source) at com.iona.isf.plugins.ServiceManagerImpl.loadService(Unknown Source) at com.iona.isf.plugins.ServiceManagerImpl.loadServices(Unknown Source) at com.iona.isf.plugins.ServiceManagerImpl.<init>(Unknown Source) at com.iona.isf.plugins.ServiceManagerFactory.createServiceManager(Unknown Source) at com.iona.isf.service.ServiceManager.initialize(Unknown Source) at com.iona.isf.plugins.server.ISFServerImpl.initialize(Unknown Source) at com.iona.corba.security.services.ServerImpl.getServices(Unknown Source) at com.iona.corba.security.services.ServerImpl.<init>(Unknown Source) at com.iona.corba.security.services.SecurityServer.run(Unknown Source) at com.iona.jbus.security.services.SecurityServer.run(SecurityServer.java:238) |
| Defect/Enhancement Number | |
| Cause | Misconfiguration when creating the Kerberos keytab file. |
| Resolution |
When using a keytab file, ensure the realm name is provided in capital letters when creating the keytab file, e.g with: kpass -princ xyz@MY.REALM ... |
| Workaround | |
| Notes | |
| Attachment |
#Orbix
#KnowledgeDocs
