Error with Active Directory Connector using SASL Authentication

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

Version 8.3

Please share any images or screenshots, if relevant.

SASL Error.png
SASL Error.png1056×136 97.2 KB

Share all details related to your problem, including any error messages you may have received.

In our Non-Production environment (but soon to be in production in Mid-July) the use of NTLM has been disabled. This started to cause issues with the Active Directory Connector and using Simple Authentication (where the username must be provided as DOMAIN/UserName. We found that is we switch to SASL that under the covers Kerberos Authentication can be leveraged. However, when we try to use SASL we are getting a different authentication error (see attached Screenshot). Basically the error reads "FATAL: Runtime exception occurred while updating he KDC cache and the KRB configuration file - dc=,dc=; java.lang.Exception [ERROR 1] ERROR occurrend while instantiating SPSSASLConextManager, cannot proceed with context creation.

2

Hi @kevinwoodbury,

I see this error for the first time, but reading the message I have some questions.

Ensure that AD service si up and running:
Are you sure the configuration on AD side is correct?
ports are opened?
have the all the permission for this operation?
can you to connect from another side to ad in slas?

I found those link about the SASL configuration, maybe they will help you:

3

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.