SAP Knowledge Base Article - Preview

1733433 - Error "No key (etype: 23) for realm YOURREALM.COM available" on Web Diagtool

Symptom

After implementing authentication with SPNego the Login screen is still displayed.

Following the instructions of KBA 1045019 - Web diagtool for collecting traces logs about the authentication procedure is collected the login fails

LOGIN.FAILED
User: N/A
IP Address: 10.101.2.153
Authentication Stack: ticket
Authentication Stack Properties:

Login Module                                                               Flag        Initialize  Login      Commit     Abort      Details
1. com.sap.security.core.server.jaas.EvaluateTicketLoginModule             SUFFICIENT  ok          exception             true       java.security.SignatureException: Certificate not found.
        #1 ume.configuration.active = true
2. com.sap.security.core.server.jaas.SPNegoLoginModule                     OPTIONAL    ok          exception             true       No key (etype: 23) for realm YOURREALM.COM available.
3. com.sap.security.core.server.jaas.CreateTicketLoginModule               SUFFICIENT  ok          false                 true       
4. com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule   REQUIRED    ok          false                 false      
5. com.sap.security.core.server.jaas.CreateTicketLoginModule               REQUIRED    ok          false                 true       
No logon policy was applied

The exception related to the failer of the SPNegoLoginModule is:

No key (etype: 23) for realm YOURREALM.COM available.


Read more...

Environment

This issue occurs on the SAP Netweaver 7.X version, when you authenticate using SPNego.

  • SAP NetWeaver 7.0
  • SAP NetWeaver 7.3
  • SAP NetWeaver 7.4
  • SAP NetWeaver 7.5
  • SAP NetWeaver Application Server for Java 7.1
  • SAP NetWeaver Application Server for Java 7.2

Product

SAP NetWeaver 7.0 ; SAP NetWeaver 7.1 ; SAP NetWeaver 7.2 ; SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP NetWeaver Application Server for Java 7.1 ; SAP NetWeaver Application Server for Java 7.2

Keywords

SPNego, spnego, SPNEGO, rc4, des, etype, 23, realm, login, logon , KBA , BC-JAS-SEC , Security, User Management , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.