IBM Support

Unable to login to server using single-signon

Troubleshooting


Problem

Issue logging in to the Modeler Server using single-signon, the error shown is: "Failed to connect to server. Single Sign-on exception: java.security.PrivilegedActionException: org.ietf.jgss.GSSException, major code: 11, minor code: 0 major string: General failure, unspecified at GSSAPI level minor string: Error canonicalizing name: java.lang.ClassCastException: java.lang.string incompatible with java.util.Vector" You have setup single-signon following the instructions here: http://www.ibm.com/support/knowledgecenter/SS3RA7_17.1.0/modeler_mainhe… So basically following steps were done: - SPN created (modelerserver/.:28055) - Unrestricted SDK JCE policy files from have been replaced on server and client with files from this location: https://www.ibm.com/marketing/iwm/iwm/web/reg/pick.do?source=jcesdk - Registry key "allowtgtsessionkey" with a hexadecimal value of 1 created here:\HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters - krb5.conf file created in c:\program files\IBM\SPSS\Modeler\17.1\config\sso with below contents: [libdefaults] default_realm= dns_lookup_kdc=true dns_lookup_realm=true [realms] = { kdc = } [default_realm] . = =

[{"Product":{"code":"SS3RA7","label":"IBM SPSS Modeler"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"Modeler Server","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"17.1","Edition":"","Line of Business":{"code":"LOB76","label":"Data Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
16 June 2018

UID

swg21976304