Skip to main content
Delphix

Environment Authentication Using Kerberos Credentials Fails on Delphix versions 6.0.0-6.0.6.1 (KBA7495)

 

KBA

KBA# 7495

 

Issue

An issue may be encountered where authentication to Unix/Linux Environments fails using Kerberos credentials, though the keytab and other details are confirmed to be correct.

This issue will affect Dataset operations (SnapSync, Provision, Refresh) as well as Environment Disovery and Refresh.

Prerequisites

  • An enabled Kerberos KDC configuration
  • One or more Environments configured with Kerberos credentials
  • Delphix Engine version is 6.0.0.0-6.0.6.1

Applicable Delphix Versions

Click here to view the versions of the Delphix engine to which this article applies
Major Release All Sub Releases
6.0 6.0.0.0, 6.0.1.0, 6.0.1.1, 6.0.2.0, 6.0.2.1, 6.0.3.0, 6.0.3.1, 6.0.4.0, 6.0.4.1, 6.0.4.2, 6.0.5.0, 6.0.6.0, 6.0.6.1

Resolution

This behavior is the result of incorrect parsing of the Kerberos authentication ticket expiration date on the Delphix Engine which may cause the ticket to be updated too frequently or not frequently enough, the latter resulting in login failures.  The behavior is ultimately resolved in 6.0.7.0 which is generally available for upgrade.

Upgrades from 6.0.2.0 and later to 6.0.7.0 do not require Support intervention; the upgrade can be applied as soon as is convenient, and may not require any VDB downtime.  Details of the target Delphix release and upgrade instructions should be reviewed for further detail:

https://docs.delphix.com/docs/release-notes

https://docs.delphix.com/docs/upgrade

The issue is referenced by DLPX-73611 in the Fixed Issues segment of Release Notes.

https://docs.delphix.com/docs/release-notes/release-notes-6-0-x/fixed-issues-6-0-x

Troubleshooting

The following event may be encountered during any job that requires Environment authentication using Kerberos credentials as mentioned earlier in the article (Dataset operations or Environment Discovery, Refresh).

messageAction: Make sure that the host user and password are correct, and that the Delphix Connector is properly registered with the Delphix Engine.
messageCode: exception.ccc.authenticate.failed
messageCommandOutput: net.schmizz.sshj.userauth.UserAuthException: Exhausted available authentication methods
messageDetails: Could not log into "<ENVIRONMENT NAME>" with the provided username and password.

 

 

Related Articles

The following articles may provide more information or related information to this article: