3742208 - Migrating from RC4 Authentication to AES Authentication - SSO fails

• Windows AD SSO fails and BI launchpad login page appears
• Doing keytab authentication fails with below error, when checking kinit -k -t X:/Path/to/file.keytab serviceAccount@DOMAIN.COM 
  • 
    Exception: krb_error 41 Message stream modified (41) Message stream modified
    KrbException: Message stream modified (41)
            at sun.security.krb5.KrbKdcRep.check(KrbKdcRep.java:45)
            at sun.security.krb5.KrbAsRep.decrypt(KrbAsRep.java:158)
            at sun.security.krb5.KrbAsRep.decryptUsingKeyTab(KrbAsRep.java:121)
            at sun.security.krb5.KrbAsReqBuilder.resolve(KrbAsReqBuilder.java:285)
            at sun.security.krb5.KrbAsReqBuilder.action(KrbAsReqBuilder.java:361)
            at sun.security.krb5.internal.tools.Kinit.<init>(Kinit.java:219)
            at sun.security.krb5.internal.tools.Kinit.main(Kinit.java:113)

• SAP BusinessObjects Business Intelligence Platform 4.x
• SAP BusinessObjects Business Intelligence Platform 2025

41 Message stream modified (41) Message stream modified, keytab, windows ad, sso , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem