Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

If the human brain were so simple that we could understand it, we would be so simple we couldn't.


devel / comp.protocols.kerberos / Internal credentials cache error for server principal - 1765328188

SubjectAuthor
o Internal credentials cache error for server principal - 1765328188Vato Kvantaliani

1
Internal credentials cache error for server principal - 1765328188

<mailman.3.1641387186.8148.kerberos@mit.edu>

  copy mid

https://www.novabbs.com/devel/article-flat.php?id=191&group=comp.protocols.kerberos#191

  copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: kvantali...@gmail.com (Vato Kvantaliani)
Newsgroups: comp.protocols.kerberos
Subject: Internal credentials cache error for server principal - 1765328188
Date: Wed, 5 Jan 2022 16:52:42 +0400
Organization: TNet Consulting
Lines: 29
Message-ID: <mailman.3.1641387186.8148.kerberos@mit.edu>
References: <CAEh05gqOaG9E11O7HdYzsnY+B9sT2-DhuxM6L9O8CGOmsci=MQ@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="19378"; mail-complaints-to="newsmaster@tnetconsulting.net"
To: kerberos@mit.edu
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=oSaS9OmMEyhZ+mzQqG1M0uNhTMnIc7mzXDpBcnHXJFk3Z6QDbQLX2yHgL8YRD3nsQoNyXjkE1OppqQSebYk1WTmRMLyHYbUSMbuk1sQPQwAHpKHaeOrgz48FbAOR32SFECfa2JqOf1JO22CuM5sSkRZrRYckHeuw802ucszLP9lsPT8D3Y3iuhFen5EcrgksybgMpV6b2uY4C/VHiTgZfDRZiUNHfmLXUSyMhJppd82kUJUXXJwhYBI5X5/C+co85/27sPtwE2KWuQVgHUSlwx1n66uH/Cf74RefyewCwpFmoo9b+HqEQmpxn8557grRmGaXHM0UeL62yfCsXcFTtA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=2iqpA5VMT+Fuisqt6ZTwRGr+Roy1oiF4u/LVzy2NQZc=;
b=Z05w36UeVMu9OzGB9qfgzj1v3pq/yP97goiXVDNFfpa9S5j0I01rWW6F56zun7jq26kERLKp92XdiESwCzCU2HDa3RGE5bbzBevmXMzvgvrd+sHnCgN71e+iBYHuVKD0zlR+AhLnF6bGBVapGi1AYgVCzxunMjP1gO6OxJui7e6ZaDMhW/SWzQBirqPhs47TIVx+1JEwbWN9/2RvHMg3+0b7nQvsN0zxl1heGKBPL96Sk4oHkcdzeOYRMmkPDCDz+61v9hKPs/qxURDkYV0I5VtbpRCauZJPYXTF331E1IOyat5VDuD9HmwlphHOyGNriSHM9YgQwAQZUFbOob1m3Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=2iqpA5VMT+Fuisqt6ZTwRGr+Roy1oiF4u/LVzy2NQZc=;
b=hoTpiVfupo3zkj79eJhlHUHeC9NvatzeYG6PbjTKfi+8+3BSaCVklZXR7F9gw4Wl9CsiL9mjUypv4wA5H32SqHDNnYcbalSB978MKfysSGR7/jx/JjYUUWQHCGqIaIajnOrSR8JlWcFtc9s92OtW2jddh+JECzh9MHNQxLuGpgY=
Authentication-Results: spf=pass (sender IP is 209.85.160.174)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;
Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
209.85.160.174 as permitted sender) receiver=protection.outlook.com;
client-ip=209.85.160.174; helo=mail-qt1-f174.google.com;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=2iqpA5VMT+Fuisqt6ZTwRGr+Roy1oiF4u/LVzy2NQZc=;
b=IEuMqaecAnZUQz9v84LeAkc3cqJ162kfMOtxSWuVQua0zRa0Ucs+ukH3lNf/h1xGNm
9jToMTjSZIQLWh2a5FbXXvm0Eh28h7d+WnAKOs7zhVhOArrQPRlNTo4jj0dAjbcPdxVx
hvvapLPd1vno394bHUho43VD23y3ibApDL+g8N0/0zq8gJQLj3FW5Lg2Q0gMcAuhQCQW
znveBOB+TrtaZZDaNhpNjPdiQzemwLwBOBo5xWxXtrj9/zqz3v0CFCodAp4kU+gygHKn
AyA3YEMOVZt/PN9DdqzB3546KD/KacwUXXpvY6RPCSj7zxblRQw8f25wyHgcw/xiMDfP
ShBg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=2iqpA5VMT+Fuisqt6ZTwRGr+Roy1oiF4u/LVzy2NQZc=;
b=juxLIc5Y7Cd/Wxd/h8NqCE5UiWhFSCbI0gHvexPNLHXTwdUd+7gwMvcipQdOB/A5G9
I/BEZRqHnWY22RLzKrb1H3PpMjqKxu5pEGaCEB4O88XCP6uMBDiwzAQaaozpaA90GzqH
uWrFE61OrEs+nbx5z40qbie7fweewl4fVIfsr1Bl+z9C1iryrs0aHr30kFAEgLEL3rUe
w643T5c+En+0P3w9Web7pnFSbRgAt/9raHKqj4nWO5XOH8+lFbx/BPNHd0J/DL6gtcIs
Re0qxaJsfYfQEjgJOIbxzh4NT9ySGUmgQWHGY6jBa8pl+VaUiZxabEoO+PuibKjMU4Bo
i0AQ==
X-Gm-Message-State: AOAM5325Mtq3a8oLjmi6fyfsSeYbyMGi9x4PyMSaycfvCBegbqM/ydD5
5mj/CRRxWNVLvSiXHX5+Nn+Gdgoe998+K3WaXrTrCtKDOv4=
X-Google-Smtp-Source: ABdhPJwvDw1Un6YQpn47k79wNk3U+Lff3Aq3PWxXa46fJYFE2mcz68hhmXPjUmPJ2eF87BRRL1uwgRWH5NhCuFUHupE=
X-Received: by 2002:a05:622a:3ca:: with SMTP id
k10mr48189847qtx.130.1641387173073;
Wed, 05 Jan 2022 04:52:53 -0800 (PST)
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 198c7985-9463-4567-dd6d-08d9d04a4a03
X-MS-TrafficTypeDiagnostic: BN0PR01MB6975:EE_
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-Microsoft-Antispam-PRVS: <BN0PR01MB69753FB785D1200DBA998E7EBF4B9@BN0PR01MB6975.prod.exchangelabs.com>
X-MS-Oob-TLC-OOBClassifiers: OLM:8882;
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:209.85.160.174; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:mail-qt1-f174.google.com; PTR:mail-qt1-f174.google.com;
CAT:NONE;
SFS:(4636009)(84050400002)(356005)(6666004)(5660300002)(33964004)(7636003)(2906002)(7596003)(34206002)(42186006)(26005)(8676002)(786003)(68406010)(82202003)(73392003)(70586007)(86362001)(336012)(83380400001)(508600001)(76482006)(316002)(55446002);
DIR:OUT; SFP:1102;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Jan 2022 12:52:53.7560 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 198c7985-9463-4567-dd6d-08d9d04a4a03
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM11FT038.eop-nam11.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN0PR01MB6975
X-OriginatorOrg: mitprod.onmicrosoft.com
X-Content-Filtered-By: Mailman/MimeDel 2.1.34
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <CAEh05gqOaG9E11O7HdYzsnY+B9sT2-DhuxM6L9O8CGOmsci=MQ@mail.gmail.com>
 by: Vato Kvantaliani - Wed, 5 Jan 2022 12:52 UTC

Hello,
PowerBI Report Server->odbc->hive integration with kerberos authentication.
client MIT Kerberos Version 4.1

SSRS reports (api/v2.0 Reports) with Kerberos authentication throwing
error:

ERROR [28000] [Cloudera][ThriftExtension] (9) Error occurred while
authenticating via SASL. Error details: SASL(-1): generic failure: GSSAPI
Error: Unspecified GSS failure. Minor code may provide more information
(Internal credentials cache error)

at Powerbi report server, kerberos client gets -

[6452] 1641381483.67003: ccselect module realm yielded error
-1765328188/Internal credentials cache error for server principal hive/
bda1node01.bog.ge@BDA1.BOG.GE

however hive/bda1node01.bog.ge@BDA1.BOG.GE is cached

Another report type (api/v2.0 PowerBIReports) works and connection is ok
but in client kb log we get:

[10708] 1641384364.890004: ccselect can't find appropriate cache for server
principal hive/bda1node01.bog.ge@BDA1.BOG.GE
though service principal is in cache

Any help or advice will be much appreciable as we were not able to get more
details on these errors.


devel / comp.protocols.kerberos / Internal credentials cache error for server principal - 1765328188

1
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor