Kerberos Authentication failing to DB Connector Node for Hana Connection

KNIME Analytics Platform
9

Hi @Param ,
I was finally able to reproduce your problem. KNIME Analytics Platform comes with Java 17 which has deprecated several weak encryption types. This is the reason why no no service ticket can be acquired resulting in the problem you reported.

To solve the problem you can either change your infrastructure to adopt stronger ciphers or add the following line to libdefaults section of the krb5.conf file that is used by your KNIME Analytics Platform:

allow_weak_crypto = true

which will enable the weak encryption types. An example krb5.conf file with the line could look like this:

[libdefaults]
    allow_weak_crypto = true
    forwardable = true
    default_realm = ADDEMO.LOCAL
    default_ccache_name = FILE:/tmp/krb5cc_%{uid}

[realms]
 ADDEMO.LOCAL = {
  kdc = testadsrv.addemo.local
 }

Bye
Tobias

5 Likes