1. Skip to Menu
  2. Skip to Content
  3. Skip to Footer>

Expert Sessions!

SPNego : Checksum error!

Wednesday, 29 August 2012 07:13

Written by Prakash Palani

Print E-mail

 

Symptom : Checksum error! checksum: 0x87a89787f08c831a5f1863023c361e8; calculated checksum: 0xf5d2c75980bfa4a04d660f733e359191

 

Could not validate SPNEGO token.

[EXCEPTION]
java.lang.Exception: Checksum error.
at com.sap.security.core.server.jaas.spnego.krb5.crypto.Rc4Crypto.decrypt(Rc4Crypto.java:72)
at com.sap.security.core.server.jaas.spnego.krb5.KrbEncryptedData.decrypt(KrbEncryptedData.java:88)
at com.sap.security.core.server.jaas.spnego.krb5.KrbApReq.decrypt(KrbApReq.java:67)
at com.sap.security.core.server.jaas.SPNegoLoginModule.parseAndValidateSPNEGOToken(SPNegoLoginModule.java:292)
at com.sap.security.core.server.jaas.SPNegoLoginModule.processAuthorizationHeader(SPNegoLoginModule.java:471)
at com.sap.security.core.server.jaas.SPNegoLoginModule.login(SPNegoLoginModule.java:140)
at com.sap.engine.services.security.login.LoginModuleLoggingWrapperImpl.login(LoginModuleLoggingWrapperImpl.java:194)
at com.sap.engine.services.security.login.ModulesProcessAction.run(ModulesProcessAction.java:70)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.services.security.login.FastLoginContext.login(FastLoginContext.java:187)
at com.sap.engine.system.SystemLoginModule.login(SystemLoginModule.java:90)
at sun.reflect.GeneratedMethodAccessor597.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:675)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)

 

Possible Solution : Checksum error indicates that the credentials received from KDC is not matching with the keytab file imported into SPNego configuration. Generally this can happen when there is a change made to the service user (i.e. changing the SPN, etc.,), if you make changes to the service users, regenerate the keytab file and import it once again. If that doesn’t work, redo the whole setup once again.

SPNego : Checksum error!