2337643 - Java AD fails for multi domain multi forest environment

• The error from BI launchpad and various client tools "The Active Directory Authentication plugin could not authenticate at this time. Please try again. If the problem persists, please contact your technical support department. (FWM 00005)"
• The error form various java logs "KrbException: Message stream modified (41)"
• BI non java client tools and even SSO will work but all java apps (tomcat, jboss, IDT) could be affected as the issue is with the krb5.ini
• If packet scan is compared between working and non working apps there will be no errors, the working apps will have AS request / reply followed by 3 TGS requests replies. The non working will only have the as request or commit succeed in java

• SAP BusinessObjects Business Intelligence Platform  4.1 and 4.0 versions could also be affected. $.2 and above are running java 1.8 and should not have issues with capaths
• SAP Java Oracle / Sun java IBM Java, all versions of java could be affected below 1.8 
• Microsoft Active Directory all supported versions 

zie emkab emkb biauth kerberos AD SSO login failed , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem