Symantec Access Management

 View Only
Expand all | Collapse all

Failed to create delegated GSSAPI token on behalf of HTTP/***.id-test.****.***@****.*** for smps/n**1-pps***-1.****.***: Minor Status=-1765328370, Major Status=851968, Message=KDC has no support for encryption type

  • 1.  Failed to create delegated GSSAPI token on behalf of HTTP/***.id-test.****.***@****.*** for smps/n**1-pps***-1.****.***: Minor Status=-1765328370, Major Status=851968, Message=KDC has no support for encryption type

    Posted Jan 25, 2019 11:21 AM

    adawe01, SungHoon_Kim Patrick-Dussault,

     

    How to resolve, why do i see this error, I have followed Document ID : KB000046427 and also followed step by step as documented by SungHoon and i have provided the SPN value of LB FQHN. Delegation is enabled. But i still get this error.

    Have created the keytabs with AES256, as per the below screenshot I could the tickets are in the same encryption type, but i still get this error.

     

    "Failed to create delegated GSSAPI token on behalf of HTTP/sts.id-test.****.***@***.***** for smps/n**-pps***-1.*****.**: Minor Status=-1765328370, Major Status=851968, Message=KDC has no support for encryption type"

     

    Env:

    SMPS: 12.8 sp1

    Product Name=CA Access Gateway
    FullVersion=12.80.0000.1761
    Version=12.80
    Build Number=1761

     

     

    below screenshot is the error:

     

     

    Please advice



  • 2.  Re: Failed to create delegated GSSAPI token on behalf of HTTP/***.id-test.****.***@****.*** for smps/n**1-pps***-1.****.***: Minor Status=-1765328370, Major Status=851968, Message=KDC has no support for encryption type

    Posted Jan 28, 2019 05:05 AM

    Chris_Hackett,

     

    Any suggestions and help would be great form the team. This looks more like a bug.

     

    Please let me know how to raise a bug

     

    Regards,

    Joseph Christie



  • 3.  Re: Failed to create delegated GSSAPI token on behalf of HTTP/***.id-test.****.***@****.*** for smps/n**1-pps***-1.****.***: Minor Status=-1765328370, Major Status=851968, Message=KDC has no support for encryption type

     
    Posted Jan 28, 2019 01:20 PM

    Hi Joseph - If you wish to log a bug, you will need to open an issue with Support. They can determine if it's a bug and log. Regards, Chris



  • 4.  Re: Failed to create delegated GSSAPI token on behalf of HTTP/***.id-test.****.***@****.*** for smps/n**1-pps***-1.****.***: Minor Status=-1765328370, Major Status=851968, Message=KDC has no support for encryption type

    Posted Jan 29, 2019 08:54 AM

    Thank you Chris.

     

    I have already raised a case with CA for this.

     

    But I would appreciate, if someone could help me out here



  • 5.  Re: Failed to create delegated GSSAPI token on behalf of HTTP/***.id-test.****.***@****.*** for smps/n**1-pps***-1.****.***: Minor Status=-1765328370, Major Status=851968, Message=KDC has no support for encryption type
    Best Answer

    Posted Feb 13, 2019 09:18 AM

    Found the issue.

    smpsprincipalName in the ACO has to be set properly. And resolved the issue.