Good afternoon team


My team is attempting to set up Kerberos/SPNEGO for one of our customers - we have completed the necessary settings in the Websphere Admin Console & restarted our DMGR/Node agents etc.

Since the restart, authentication of our admin user (primary administrative user) is failing with the below error from the systemout.log of the dmgr

[31/01/20 11:05:07:334 NZDT] 000000f5 FormLoginExte E SECJ0118E: Authentication error during authentication for user admin

This user logs in fine if we roll back our changes prior to setting up the Kerberos/SPNEGO configs.


Any pointers would be appreciated :-)


Many thanks


Brent Nelson



------------------------------
Brent Nelson
------------------------------

Hello Brent,
are you getting any additional errors logged? SystemOut.log/SystemErr.log? Is the primary Admin user you've configured in the user registry?

If that does not help I'd suggest to collect the following data: https://www.ibm.com/support/pages/mustgather-spnego-problems-websphere-traditional and see if that gives your further pointers (or open a case with IBM who will ask for this set of data as well).

Wish you success ..


------------------------------
Hermann Huebler

#IBMChampion
------------------------------

Original Message:
Sent: Thu January 30, 2020 07:59 PM
From: Brent Nelson
Subject: SECJ0118E Authentication Error for Admin User

Good afternoon team


My team is attempting to set up Kerberos/SPNEGO for one of our customers - we have completed the necessary settings in the Websphere Admin Console & restarted our DMGR/Node agents etc.

Since the restart, authentication of our admin user (primary administrative user) is failing with the below error from the systemout.log of the dmgr

[31/01/20 11:05:07:334 NZDT] 000000f5 FormLoginExte E SECJ0118E: Authentication error during authentication for user admin

This user logs in fine if we roll back our changes prior to setting up the Kerberos/SPNEGO configs.

Any pointers would be appreciated :-)


Many thanks


Brent Nelson



------------------------------
Brent Nelson
------------------------------

I suggest enable the WAS security must gather for SPNEGO problem - e.g. here is the must gather 

https://www.ibm.com/support/pages/mustgather-spnego-problems-websphere-traditional

This require a startup trace - then look at "Request Context" to see if you are receiving an SPNEGO token YII.. or not without trace its basic error code generated as authentication failed for user. 

------------------------------
Ajit Jariwala
------------------------------

Original Message:
Sent: Thu January 30, 2020 07:59 PM
From: Brent Nelson
Subject: SECJ0118E Authentication Error for Admin User

Good afternoon team


My team is attempting to set up Kerberos/SPNEGO for one of our customers - we have completed the necessary settings in the Websphere Admin Console & restarted our DMGR/Node agents etc.

Since the restart, authentication of our admin user (primary administrative user) is failing with the below error from the systemout.log of the dmgr

[31/01/20 11:05:07:334 NZDT] 000000f5 FormLoginExte E SECJ0118E: Authentication error during authentication for user admin

This user logs in fine if we roll back our changes prior to setting up the Kerberos/SPNEGO configs.

Any pointers would be appreciated :-)


Many thanks


Brent Nelson



------------------------------
Brent Nelson
------------------------------