SAP Knowledge Base Article - Preview

1733433 - Error "No key (etype: 23) for realm YOURREALM.COM available" on Web Diagtool

Symptom

After implementing authentication with SPNego the Login screen is still displayed.

Following the instructions of KBA 1045019 - Web diagtool for collecting traces logs about the authentication procedure is collected the login fails

LOGIN.FAILED
User: N/A
IP Address: 10.101.2.153
Authentication Stack: ticket
Authentication Stack Properties:

Login Module                                                               Flag        Initialize  Login      Commit     Abort      Details
1. com.sap.security.core.server.jaas.EvaluateTicketLoginModule             SUFFICIENT  ok          exception             true       java.security.SignatureException: Certificate not found.
        #1 ume.configuration.active = true
2. com.sap.security.core.server.jaas.SPNegoLoginModule                     OPTIONAL    ok          exception             true       No key (etype: 23) for realm YOURREALM.COM available.
3. com.sap.security.core.server.jaas.CreateTicketLoginModule               SUFFICIENT  ok          false                 true       
4. com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule   REQUIRED    ok          false                 false      
5. com.sap.security.core.server.jaas.CreateTicketLoginModule               REQUIRED    ok          false                 true       
No logon policy was applied

The exception related to the failer of the SPNegoLoginModule is:

No key (etype: 23) for realm YOURREALM.COM available.


Read more...

Environment

This issue occurs on the SAP Netweaver 7.X version, when you authenticate using SPNego.

  • SAP NetWeaver 7.0
  • SAP NetWeaver 7.3
  • SAP NetWeaver 7.4
  • SAP NetWeaver 7.5
  • SAP NetWeaver Application Server for Java 7.1
  • SAP NetWeaver Application Server for Java 7.2

Product

SAP NetWeaver 7.0 ; SAP NetWeaver 7.1 ; SAP NetWeaver 7.2 ; SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP NetWeaver Application Server for Java 7.1 ; SAP NetWeaver Application Server for Java 7.2

Keywords

SPNego, spnego, SPNEGO, rc4, des, etype, 23, realm, login, logon , KBA , BC-JAS-SEC-LGN , Logon, SSO , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.