4 Replies Latest reply on Sep 23, 2019 7:16 AM by Lucas Castro

    Intermittent Kerberos


      our kerberos on tableau 10.3 and 2018.3 both have the same issue with intermittent SSO login.


      [Mon May 06 15:30:41.231048 2019] [:error] [pid 11464:tid 5496] [client a.b.c.d:37901] gss_acquire_cred() failed: Unspecified GSS failure.  Minor code may provide more information (, No key table entry found matching HTTP/tableau.domain.local@), referer: https://tableau.domain.org/


      our users visit https://tableau.domain.org/ but our windows domain is domain.local


      i'm not clear on why tableau is showing this error periodically when users login and breaking SSO.


      This is how it was setup: it pass through our load balancer:


      tabadmin set gateway.public.host "tableau.domain.org"

      tabadmin set gateway.public.port "443"

      tabadmin set gateway.trusted "e.f.g.h"

      tabadmin set gateway.trusted_hosts "tableau.domain.org"

      tabadmin config




      SPNs created:

      setspn -s HTTP/tableau.domain.org DOMAIN\tableau

      setspn -s HTTP/tableau DOMAIN\tableau


      i've also added:

      setspn -s HTTP/tableau.domain.local DOMAIN\tableau



      For the keytab file:

      ktpass /princ HTTP/tableau.domain.org@DOMAIN.LOCAL /pass !adpass! /ptype KRB5_NT_PRINCIPAL /crypto all /out C:\kerberos.keytab