Problem Note 62147: LOGON_ERROR_GSS errors occur in SAS® Logon Micro service logs after you configure Kerberos authentication
 |  |  |  |
After you enable Kerberos authentication for SAS Logon micro service in SAS Viya 3.3, you might see errors similar to the following:
2018-03-28 12:12:26.323 ERROR 23169 --- [o-auto-1-exec-7] .s.l.p.k.CredentialCachingSuccessHandler : service [02bcc69b3319aa10] [LOGON_ERROR_GSS] There was an error caching the kerberos credentials for user1@domain.com: No valid credentials provided
2018-03-28 12:12:38.439 ERROR 23169 --- [o-auto-1-exec-5] .s.l.p.k.CredentialCachingSuccessHandler : service [51bdc1035fb74e1e] [LOGON_ERROR_GSS] There was an error caching the kerberos credentials for user1@domain.com: No valid credentials provided
2018-03-28 12:17:13.169 ERROR 23169 --- [o-auto-1-exec-3] .s.l.p.k.CredentialCachingSuccessHandler : service [9a5c838ff7c8a5b3] [LOGON_ERROR_GSS] There was an error caching the kerberos credentials for user1@domain.com: No valid credentials provided
2018-03-28 12:19:46.115 ERROR 23169 --- [-auto-1-exec-10] .s.l.p.k.CredentialCachingSuccessHandler : service [40a0a9bf546cd60c] [LOGON_ERROR_GSS] There was an error caching the kerberos credentials for user1@domain.com: No valid credentials provided
2018-03-28 12:12:38.439 ERROR 23169 --- [o-auto-1-exec-5] .s.l.p.k.CredentialCachingSuccessHandler : service [51bdc1035fb74e1e] [LOGON_ERROR_GSS] There was an error caching the kerberos credentials for user1@domain.com: No valid credentials provided
2018-03-28 12:17:13.169 ERROR 23169 --- [o-auto-1-exec-3] .s.l.p.k.CredentialCachingSuccessHandler : service [9a5c838ff7c8a5b3] [LOGON_ERROR_GSS] There was an error caching the kerberos credentials for user1@domain.com: No valid credentials provided
2018-03-28 12:19:46.115 ERROR 23169 --- [-auto-1-exec-10] .s.l.p.k.CredentialCachingSuccessHandler : service [40a0a9bf546cd60c] [LOGON_ERROR_GSS] There was an error caching the kerberos credentials for user1@domain.com: No valid credentials provided
These errors do not seem to have any functional impact.
The errors occur when the holdOnToGSSContext=true flag is set in the sas.logon.kerberos definition. This parameter enables delegation, but the web browser is not configured properly to delegate the credentials.
To resolve these errors, you can either configure the browser correctly for Kerberos delegation or disable the flag (by setting holdOnToGSSContext=false) if delegation is not needed.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Viya | Linux for x64 | 3.3 | |||
After you enable Kerberos authentication for SAS Logon Micro service in SAS® Viya® 3.3, you might notice some errors.
| Type: | Problem Note |
| Priority: | medium |
| Date Modified: | 2018-04-23 15:36:32 |
| Date Created: | 2018-04-17 11:58:36 |