Environment Authentication Using Kerberos Credentials Fails on Delphix versions 6.0.0-6.0.6.1 (KBA7495)
KBA
KBA# 7495
Issue
An issue may be encountered where authentication to Unix/Linux Environments fails using Kerberos credentials, though the keytab and other details are confirmed to be correct.
This issue will affect Dataset operations (SnapSync, Provision, Refresh) as well as Environment Disovery and Refresh.
Prerequisites
- An enabled Kerberos KDC configuration
- One or more Environments configured with Kerberos credentials
- Delphix Engine version is 6.0.0.0-6.0.6.1
Applicable Delphix Versions
- Click here to view the versions of the Delphix engine to which this article applies
-
Major Release All Sub Releases 6.0 6.0.0.0, 6.0.1.0, 6.0.1.1, 6.0.2.0, 6.0.2.1, 6.0.3.0, 6.0.3.1, 6.0.4.0, 6.0.4.1, 6.0.4.2, 6.0.5.0, 6.0.6.0, 6.0.6.1
Resolution
This behavior is the result of incorrect parsing of the Kerberos authentication ticket expiration date on the Delphix Engine which may cause the ticket to be updated too frequently or not frequently enough, the latter resulting in login failures. The behavior is ultimately resolved in 6.0.7.0 which is generally available for upgrade.
Upgrades from 6.0.2.0 and later to 6.0.7.0 do not require Support intervention; the upgrade can be applied as soon as is convenient, and may not require any VDB downtime. Details of the target Delphix release and upgrade instructions should be reviewed for further detail:
https://docs.delphix.com/docs/release-notes
https://docs.delphix.com/docs/upgrade
The issue is referenced by DLPX-73611 in the Fixed Issues segment of Release Notes.
https://docs.delphix.com/docs/release-notes/release-notes-6-0-x/fixed-issues-6-0-x
Troubleshooting
The following event may be encountered during any job that requires Environment authentication using Kerberos credentials as mentioned earlier in the article (Dataset operations or Environment Discovery, Refresh).
messageAction: Make sure that the host user and password are correct, and that the Delphix Connector is properly registered with the Delphix Engine. messageCode: exception.ccc.authenticate.failed messageCommandOutput: net.schmizz.sshj.userauth.UserAuthException: Exhausted available authentication methods messageDetails: Could not log into "<ENVIRONMENT NAME>" with the provided username and password.
Related Articles
The following articles may provide more information or related information to this article: