Skip to end of metadata
Go to start of metadata

Symptom

The kerberos keytab file upload fails with this error::

#ERROR#org.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/].[ConfigurationServlet]
#http-bio-8443-exec-7#          
#Servlet.service() for servlet [ConfigurationServlet] in context with path [] threw exception java.lang.NegativeArraySizeException
  at com.sap.security.krb5.cfg.keytab.KeytabInputStream.readOctetString(KeytabInputStream.java:40)
  at com.sap.security.krb5.cfg.keytab.KeytabEntry.<init>(KeytabEntry.java:42)
  at com.sap.security.krb5.cfg.keytab.Keytab.<init>(Keytab.java:23)
  at com.sap.scc.config.SccKrbRealmConfiguration.toEncryptionKeys(SccKrbRealmConfiguration.java:267)
  at com.sap.scc.config.SccKrbRealmConfiguration.init(SccKrbRealmConfiguration.java:255)
  at com.sap.scc.servlets.ConfigurationServlet.setKerberosConfiguration(ConfigurationServlet.java:2018)
  at com.sap.scc.servlets.ConfigurationServlet.dispatch(ConfigurationServlet.java:203)
  at com.sap.scc.servlets.ServletUtilities.service(ServletUtilities.java:41)

Problem

The kerberos keytab file is not valid or corrupt. 

Solution

Create a kerberos keytab file with the JVM the SAP Cloud Connector is running on.

Look for the path of the JVM, call SAP Cloud Connector administartion page at https://localhost:8443, select About link:

In the popup window the JVM path is displayed:

Open a command line window, navigate to the jre/bin folder, create a kerberos keytab file using Java ktab tool:

ktab -a <principal_name>@<REALM> -k <keytab_file_name>

Import the generated keytab file into the SAP Cloud Connector.

 

  • No labels