SPNEGO stopped working after an WebSphere update

HCL Connections Connections Forum
,
1

Connections Version: 7.0 CFix 2503
Operating System: Windows Server 2019

Problem/Query:

Hey everyone!

I have the following problem:

After updating an old Connections installation form 7.0 and WebSphere 8.5.5.21 to 7.0 CFix 2503 and WebSphere 8.5.5.26 the SPNEGO configuration isn’t working anymore.

The customer uses SPNEGO Web for SSO with the Windows Desktop (for various reasons) and that did work very well until the update.
But after the update to WebSphere 8.5.5.26 there is an error when saving the SPNEGO config in the WebSphere Console:

org.ietf.jgss.GSSException, Hauptcode: 13, Nebencode: 0 Hauptzeichenfolge: Ungültige Berechtigungsnachweise Nebenzeichenfolge: Berechtigungsnachweis aus dem JAAS-Subjekt für folgenden Principal kann nicht abgerufen werden: HTTP/(obfuscated for privacy)

So I recreated the keytab file on the DC an created a new krb5.conf for WebSphere. But the error remains after a restart of WebSphere/Connections.
I also tried to create a keytab file with multiple SPNs, but that didn’t work either.

Any ideas?
(Case already opened)

Regards
Florian

2

Hello

Thanks for the post - we will likely need to collect data specific to your environment and will post further feedback via the case.

regards,
Ariel
HCL Support

1 Like